Wysoka
CVE-2013-1909
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 1 996
Wyczyść filtry
Wysoka
CVE-2017-7466
Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the abili
Średnia
CVE-2013-0306
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of serv
Średnia
CVE-2013-2255
OpenStack Keystone and other components vulnerable to Improper Certificate Validation
Krytyczna
CVE-2009-2701
Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing
Wysoka
CVE-2009-2659
The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory trave
Krytyczna
CVE-2008-1475
The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the (1) list, (2) display, and (3) set
Średnia
CVE-2022-24880
Potential Captcha Validate Bypass in flask-session-captcha
Wysoka
CVE-2022-28108
Selenium Server (Grid) CSRF
Wysoka
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error i
Krytyczna
CVE-2022-24801
Inconsistent Interpretation of HTTP Requests in twisted.web
Wysoka
CVE-2022-24798
Improper Removal of Sensitive Information Before Storage or Transfer in irrd
Wysoka
CVE-2022-22936
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying
Wysoka
CVE-2022-24757
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
Krytyczna
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
Wysoka
CVE-2022-24761
HTTP Request Smuggling in waitress
Krytyczna
ghsa-32gv-6cf3-wcmq
HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods
Wysoka
CVE-2022-25508
Improper Authentication in FreeTAKServer
Wysoka
CVE-2022-25510
Hard coded credentials in FreeTAKServer
Wysoka
CVE-2022-26662
XML Entity Expansion in trytond and proteus
Średnia
CVE-2022-26661
Improper Restriction of XML External Entity Reference in trytond and proteus
Krytyczna
CVE-2022-0766
Server-Side Request Forgery in calibreweb
Krytyczna
CVE-2022-0767
Server-Side Request Forgery in calibreweb
Wysoka
CVE-2022-21716
Twisted SSH client and server deny of service during SSH handshake.
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.