Średnia
CVE-2023-32675
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 682
Wyczyść filtry
Wysoka
CVE-2023-30837
vyper vulnerable to storage allocator overflow
Krytyczna
ghsa-83fm-w79m-64r5
Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
Wysoka
CVE-2023-30629
Incorrect success value returned in vyper
Wysoka
CVE-2023-30620
mindsdb arbitrary file write when extracting a remotely retrieved Tarball
Średnia
CVE-2022-23522
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Wysoka
CVE-2023-26043
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Średnia
CVE-2023-23940
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Średnia
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Średnia
CVE-2022-4572
A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files of the file ubireader/ubifs/output.py of
Niska
CVE-2022-23531
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package
Niska
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Krytyczna
CVE-2022-44900
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file
Średnia
CVE-2022-41889
Segfault via invalid attributes in `pywrap_tfe_src.cc`
Wysoka
CVE-2022-40604
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
Wysoka
CVE-2022-34749
Mistune vulnerable to catastrophic backtracking
Krytyczna
CVE-2022-34265
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
Wysoka
CVE-2022-29255
Multiple evaluation of contract address in call in vyper
Średnia
CVE-2014-4301
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML vi
Wysoka
CVE-2008-5646
Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."
Średnia
CVE-2008-5647
Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors.
Krytyczna
CVE-2016-8638
Session Fixation in ipsilon
Krytyczna
CVE-2018-13347
mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.
Wysoka
CVE-2009-4405
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "chec
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.