Niska
CVE-2023-41335
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 6 861
Wyczyść filtry
Krytyczna
CVE-2023-41419
Gevent allows remote attacker to escalate privileges
Wysoka
CVE-2023-42261
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not in
Niska
ghsa-hc5c-r8m5-2gfh
plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait
Średnia
CVE-2023-41048
plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity content. Prior to versions 5.6.1, 6.0.3, 6.1.3, and 6.2.1, there is a stored cross sit
Niska
ghsa-v8gr-m533-ghj9
Vulnerable OpenSSL included in cryptography wheels
Wysoka
CVE-2023-42457
plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the `++api++` traverser is accidentally
Krytyczna
CVE-2019-19450
ReportLab vulnerable to remote code execution via paraparser
Nieoceniona
pysec-2023-175
Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.
Nieoceniona
pysec-2023-174
imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). imagecodecs v2023.9.18 upgrades the bundled libwebp binary to
Wysoka
CVE-2023-42443
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Średnia
CVE-2023-42441
Vyper has incorrect re-entrancy lock when key is empty string
Wysoka
CVE-2023-42439
GeoNode vulnerable to SSRF Bypass to return internal host data
Średnia
CVE-2023-41885
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
Wysoka
CVE-2023-40712
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the s
Średnia
CVE-2023-40611
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could hav
Wysoka
Wykorzystywana w atakach
CVE-2023-4863
libwebp: OOB write in BuildHuffmanTable
Średnia
CVE-2023-41369
The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in
Średnia
CVE-2023-41050
Information disclosure in AccessControl
Średnia
CVE-2023-39265
Apache Superset Improper Input Validation vulnerability
Średnia
CVE-2023-37941
Apache Superset Deserialization of Untrusted Data vulnerability
Średnia
CVE-2023-32672
Apache Superset has incorrect authorization check
Średnia
CVE-2023-27523
Apache Superset vulnerable to improper data authorization
Średnia
CVE-2023-36388
Apache Superset Server Side Request Forgery vulnerability
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.