Wysoka
CVE-2023-25577
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 6 855
Wyczyść filtry
Niska
CVE-2023-23934
Incorrect parsing of nameless cookies leads to __Host- cookies bypass
Wysoka
ghsa-344m-qcjq-xgrf
Vulnerable OpenSSL included in sgx-dcap-quote-verify-python
Krytyczna
CVE-2023-0777
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.
Niska
CVE-2023-24816
IPython vulnerable to command injection via set_term_title
Średnia
CVE-2022-47419
Mayan EDMS DMS XSS vulnerability
Średnia
CVE-2023-23931
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
Średnia
CVE-2020-36660
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the comp
Wysoka
CVE-2022-45786
Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection
Krytyczna
CVE-2019-25101
Header injection in TurboGears
Średnia
CVE-2023-23940
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Wysoka
CVE-2023-23969
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-s
Średnia
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Nieoceniona
CVE-2023-24829
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional comp
Wysoka
CVE-2021-4315
A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mod
Średnia
CVE-2023-24622
isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF.
Średnia
CVE-2022-47951
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
Średnia
CVE-2023-0470
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.
Średnia
CVE-2023-0519
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.
Wysoka
CVE-2022-25882
Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory
Niska
CVE-2023-23611
LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability
Nieoceniona
pysec-2023-1
Adyen has utility methods for validating notification HMAC signatures. The is_valid_hmac and is_valid_hmac_notification methods are vulnerable to a timing attack, you should compare the hash of the HM
Średnia
CVE-2023-0438
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
Krytyczna
CVE-2023-0435
Excessive Attack Surface in pyload-ng
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.