Archiwum podatności

Poznaj podatności. Chroń swoje aplikacje.

Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.

Platforma

Istotność

Ujawniono od

Ujawniono do

Archiwum podatności 71 593

Krytyczna 16.10.2023

CVE-2011-10004

Recip.ly <= 1.1.7 - Unauthenticated Arbitrary File Upload in uploadImage.php

Średnia 16.10.2023

CVE-2023-46077

The Awesome Feed – Custom Feed <= 2.2.5 - Reflected Cross-Site Scripting

Wysoka 15.10.2023

CVE-2023-5590

NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.

Średnia 15.10.2023

CVE-2018-25091

urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in t

Średnia 15.10.2023

CVE-2023-5082

History Log by click5 <= 1.0.12 - Authenticated(Administrator+) Time-Based Blind SQL Injection

Średnia 14.10.2023

CVE-2023-42792

Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write acce

Średnia 14.10.2023

CVE-2023-42663

Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs.

Średnia 14.10.2023

CVE-2023-42780

Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user had no permission to see those DAG

Średnia 14.10.2023

CVE-2023-45348

Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when the "expose_config" option is set to "no

Wysoka 14.10.2023

CVE-2023-26155

node-qpdf vulnerable to command injection

Średnia 13.10.2023

CVE-2023-4829

Cross-site Scripting (XSS) in froxlor/froxlor

Średnia 13.10.2023

CVE-2023-5573

Allocation of Resources Without Limits or Throttling in vriteio/vrite

Krytyczna 13.10.2023

CVE-2023-5572

Server-Side Request Forgery (SSRF) in vriteio/vrite

Średnia 13.10.2023

CVE-2023-5571

Improper Input Validation in vriteio/vrite

Średnia 13.10.2023

CVE-2023-38251