Wysoka
CVE-2023-42457
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 334
Wyczyść filtry
Wysoka
CVE-2023-42443
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Średnia
CVE-2023-41885
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
Wysoka
CVE-2023-40712
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the s
Średnia
CVE-2023-40611
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could hav
Średnia
CVE-2023-37941
Apache Superset Deserialization of Untrusted Data vulnerability
Średnia
CVE-2023-20897
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unrespons
Krytyczna
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.
Średnia
CVE-2023-41040
GitPython blind local file inclusion
Wysoka
CVE-2023-41039
Sandbox escape via various forms of "format".
Średnia
CVE-2023-36811
Archive spoofing vulnerability in borgbackup
Średnia
CVE-2023-40170
cross-site inclusion (XSSI) of files in jupyter-server
Średnia
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
Wysoka
CVE-2023-40590
GitPython untrusted search path on Windows systems leading to arbitrary code execution
Wysoka
CVE-2023-40195
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.
Wysoka
CVE-2023-38201
Keylime registrar and (untrusted) Agent can be bypassed by an attacker
Wysoka
CVE-2023-40017
GeoNode Server Side Request forgery
Średnia
CVE-2023-39441
Apache Airflow missing Certificate Validation
Wysoka
CVE-2023-37379
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user t
Wysoka
CVE-2023-40273
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the s
Krytyczna
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.
Krytyczna
CVE-2023-39661
PandasAI vulnerable to arbitrary code execution
Krytyczna
CVE-2023-38896
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.
Krytyczna
CVE-2023-39659
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.