Wysoka
CVE-2024-4321
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 6 861
Wyczyść filtry
Średnia
ghsa-23j4-mw76-5v7h
Scrapy allows redirect following in protocols other than HTTP
Średnia
ghsa-jm3v-qxmh-hxwv
Scrapy's redirects ignoring scheme-specific proxy settings
Średnia
CVE-2024-1968
In scrapy/scrapy, an issue was identified where the Authorization header is not removed during redirects that only change the scheme (e.g., HTTPS to HTTP) but remain within the same domain. This behav
Krytyczna
CVE-2024-32977
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability that allows an unauthenticated attacker to completely
Średnia
CVE-2024-32077
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.
Średnia
CVE-2024-28148
Apache Superset Incorrect Authorization vulnerability
Wysoka
CVE-2024-34246
wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in wasm3/platforms/app/main.c.
Krytyczna
CVE-2024-34249
wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/source/m3_compile.c.
Wysoka
CVE-2024-34252
wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3_compile.c.
Średnia
CVE-2024-34529
Nebari through 2024.4.1 prints the temporary Keycloak root password.
Średnia
CVE-2024-34528
WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because the conf_path os.open does not use a mode parameter during file creation.
Wysoka
CVE-2024-34510
Gradio before 4.20 allows credential leakage on Windows.
Niska
CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.
Krytyczna
CVE-2024-3955
CraftBeerPi 4 allows arbitrary code execution
Krytyczna
CVE-2024-33768
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
Średnia
CVE-2024-33766
lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.
Średnia
CVE-2024-33767
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.
Średnia
CVE-2024-33764
lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.
Wysoka
CVE-2024-33763
lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.
Średnia
CVE-2024-33664
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT b
Średnia
CVE-2024-32645
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, incorrect values can be logged when `raw_log` builtin is called with memory or storage argum
Średnia
CVE-2024-32649
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `sqrt` builtin can result in double eval vulnerability when the argument has side-
Średnia
CVE-2024-32648
vyper default functions don't respect nonreentrancy keys
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.