Wysoka
CVE-2023-45815
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 2 016
Wyczyść filtry
Wysoka
CVE-2023-46229
LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.
Średnia
CVE-2023-45803
urllib3's request body not stripped after redirect from 303 status changes request method to GET
Średnia
CVE-2023-45129
matrix-synapse vulnerable to denial of service due to malicious server ACL events
Wysoka
CVE-2023-41047
OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine
Wysoka
CVE-2023-43804
`Cookie` HTTP header isn't stripped on cross-origin redirects
Wysoka
CVE-2023-26151
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop a
Krytyczna
ghsa-4mqg-h5jf-j9m7
TorchServe Pre-Auth Remote Code Execution
Niska
CVE-2023-41335
matrix-synapse vulnerable to temporary storage of plaintext passwords during password changes
Krytyczna
CVE-2023-41419
Gevent allows remote attacker to escalate privileges
Wysoka
CVE-2023-42261
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not in
Wysoka
CVE-2023-42457
plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the `++api++` traverser is accidentally
Wysoka
CVE-2023-42439
GeoNode vulnerable to SSRF Bypass to return internal host data
Średnia
CVE-2023-41885
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
Średnia
CVE-2023-39265
Apache Superset Improper Input Validation vulnerability
Średnia
CVE-2023-36388
Apache Superset Server Side Request Forgery vulnerability
Średnia
CVE-2023-20897
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unrespons
Średnia
CVE-2023-40170
cross-site inclusion (XSSI) of files in jupyter-server
Średnia
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
Wysoka
CVE-2023-40195
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.
Wysoka
CVE-2023-40017
GeoNode Server Side Request forgery
Średnia
CVE-2023-39441
Apache Airflow missing Certificate Validation
Wysoka
CVE-2023-37379
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user t
Wysoka
CVE-2023-40273
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the s
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.