Krytyczna
CVE-2023-38860
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 334
Wyczyść filtry
Średnia
CVE-2023-54397
Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths
Wysoka
CVE-2023-39553
apache-airflow-providers-apache-drill Improper Input Validation vulnerability
Wysoka
CVE-2023-38759
Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templa
Średnia
CVE-2023-38758
Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the license_author field in the add-ingredient function in the templat
Krytyczna
CVE-2023-39363
Vyper has incorrectly allocated named re-entrancy locks
Wysoka
CVE-2023-39508
Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Airflow.The "Run Task" feature enables authentica
Krytyczna
CVE-2023-36095
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_obje
Krytyczna
CVE-2023-38699
MindsDB can be made to not verify SSL certificates
Krytyczna
CVE-2023-38686
Sydent does not verify email server certificates
Niska
ghsa-jm77-qphf-c4w8
pyca/cryptography's wheels include vulnerable OpenSSL
Średnia
CVE-2023-38501
copyparty vulnerable to reflected cross-site scripting via k304 parameter
Średnia
CVE-2023-37902
ecrecover can return undefined data if signature does not verify
Średnia
ghsa-cw7j-v52w-fp5r
copyparty vulnerable to reflected cross-site scripting via hc parameter
Średnia
CVE-2023-37901
Indico vulnerable to Cross-Site-Scripting via confirmation prompts
Średnia
CVE-2023-37276
aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser
Niska
CVE-2023-3674
A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only e
Wysoka
CVE-2023-37474
copyparty vulnerable to path traversal attack
Wysoka
CVE-2023-35908
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that is not affected
Wysoka
CVE-2023-22888
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter. This vulnerability is considered low s
Wysoka
CVE-2023-36543
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not aff
Wysoka
CVE-2023-22887
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id pa
Wysoka
CVE-2022-46651
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considere
Wysoka
CVE-2023-37271
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.