Średnia
CVE-2023-41882
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 6 861
Wyczyść filtry
Niska
CVE-2023-41881
vantage6 does not properly delete linked resources when deleting a collaboration
Wysoka
CVE-2023-23930
Pickle serialization vulnerable to Deserialization of Untrusted Data
Średnia
CVE-2023-36566
Microsoft Common Data Model SDK Denial of Service Vulnerability
Średnia
CVE-2023-45129
matrix-synapse vulnerable to denial of service due to malicious server ACL events
Krytyczna
CVE-2023-44467
langchain_experimental 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via the PALChain in the python exec method.
Wysoka
CVE-2023-41047
OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine
Wysoka
ghsa-f9pm-4g9p-6vm3
Bundled libwebp in pywebp vulnerable
Wysoka
ghsa-94vc-p8w7-5p49
Bundled libwebp in imagecodecs vulnerable
Niska
CVE-2023-44389
Zope management interface vulnerable to stored cross site scripting via the title property
Wysoka
CVE-2023-43804
`Cookie` HTTP header isn't stripped on cross-origin redirects
Wysoka
CVE-2023-26151
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop a
Wysoka
CVE-2023-26150
Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. **Note:** This issue i
Średnia
CVE-2023-44463
An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to
Krytyczna
ghsa-4mqg-h5jf-j9m7
TorchServe Pre-Auth Remote Code Execution
Nieoceniona
pysec-2023-182
opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp
Nieoceniona
pysec-2023-181
opencv-contrib-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.
Nieoceniona
pysec-2023-183
opencv-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.
Nieoceniona
pysec-2023-184
opencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2
Wysoka
CVE-2023-39410
Apache Avro Java SDK vulnerable to Improper Input Validation
Wysoka
CVE-2023-5289
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
Krytyczna
CVE-2023-26145
This affects versions of the package pydash before 6.0.0. A number of pydash methods such as pydash.objects.invoke() and pydash.collections.invoke_map() accept dotted paths (Deep Path Strings) to targ
Średnia
CVE-2023-42460
Vyper's `_abi_decode` input not validated in complex expressions
Średnia
CVE-2023-42453
matrix-synapse vulnerable to improper validation of receipts allows forged read receipts
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.