Wysoka
CVE-2009-0669
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 335
Wyczyść filtry
Krytyczna
CVE-2009-0668
Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code
Średnia
CVE-2008-2302
Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject
Wysoka
CVE-2008-1937
The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges.
Wysoka
CVE-2008-0299
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by pred
Wysoka
CVE-2007-6738
pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the nu
Krytyczna
CVE-2007-5741
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity modul
Średnia
CVE-2007-1406
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.
Średnia
CVE-2022-24880
Potential Captcha Validate Bypass in flask-session-captcha
Wysoka
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization
Średnia
ghsa-cf4q-4cqr-7g7w
SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc
Wysoka
CVE-2022-28108
Selenium Server (Grid) CSRF
Wysoka
CVE-2022-24857
Improper Authentication in django-mfa3
Krytyczna
CVE-2022-28347
SQL Injection in Django
Wysoka
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error i
Krytyczna
CVE-2022-24801
Inconsistent Interpretation of HTTP Requests in twisted.web
Wysoka
CVE-2022-24798
Improper Removal of Sensitive Information Before Storage or Transfer in irrd
Wysoka
CVE-2022-22936
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying
Wysoka
CVE-2022-24757
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
Wysoka
CVE-2022-0315
Use of insecure temporary file in Horovod
Krytyczna
CVE-2022-26184
Poetry before v1.1.9 contains Untrusted Search Path
Krytyczna
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
Wysoka
CVE-2022-24761
HTTP Request Smuggling in waitress
Wysoka
CVE-2022-25510
Hard coded credentials in FreeTAKServer
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.