Wysoka
CVE-2023-36827
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 6 855
Wyczyść filtry
Wysoka
CVE-2023-34457
MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form
Średnia
CVE-2023-25399
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.
Krytyczna
CVE-2023-36258
An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALChain in the python exec method.
Wysoka
CVE-2023-36814
Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module
Wysoka
CVE-2023-36053
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large numb
Krytyczna
CVE-2023-35797
Apache Airflow Hive Provider Beeline remote code execution with Principal
Krytyczna
CVE-2023-31543
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server.
Nieoceniona
CVE-2023-37360
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security pro
Wysoka
CVE-2020-26708
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Wysoka
CVE-2020-26710
easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Wysoka
CVE-2020-26709
py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Niska
ghsa-373w-rj84-pv6x
SafeURL-Python's hostname blocklist does not block FQDNs
Średnia
CVE-2023-35798
Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability
Krytyczna
ghsa-hj8m-9fhf-v7jp
fief-server Server-Side Template Injection vulnerability
Średnia
CVE-2023-34110
Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error
Krytyczna
CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.
Wysoka
CVE-2023-35005
In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations.
Krytyczna
CVE-2023-34540
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution.
Wysoka
CVE-2023-34233
Snowflake Python Connector vulnerable to Command Injection
Średnia
CVE-2023-34239
Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs
Średnia
CVE-2023-32683
Synapse has URL deny list bypass via oEmbed and image URLs when generating previews
Średnia
CVE-2023-32682
Synapse has improper checks for deactivated users during login
Niska
ghsa-5cpq-8wj7-hf2v
Vulnerable OpenSSL included in cryptography wheels
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.