Mittel
CVE-2022-29212
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 422
Filter zurücksetzen
Mittel
CVE-2021-3313
Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when
Hoch
CVE-2021-25315
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify
Mittel
CVE-2010-2487
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted
Mittel
CVE-2010-2969
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to
Mittel
CVE-2016-7137
Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing
Kritisch
CVE-2009-2701
Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing
Hoch
CVE-2009-0669
Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network
Kritisch
CVE-2009-0668
Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code
Hoch
CVE-2022-24845
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In affected versions, the return of `<iface>.returns_int128()` is not validated to fall within the bounds of `int128`. Thi
Kritisch
CVE-2022-24801
Inconsistent Interpretation of HTTP Requests in twisted.web
Hoch
CVE-2022-22941
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any
Mittel
CVE-2022-23583
`CHECK`-failures in binary ops in Tensorflow
Hoch
CVE-2022-23594
Out of bounds read in Tensorflow
Mittel
CVE-2022-23586
Multiple `CHECK`-fails in `function.cc` in TensowFlow
Hoch
CVE-2022-21668
Pipenv's requirements.txt parsing allows malicious index url in comments
Mittel
CVE-2021-43837
vault-cli contains possible RCE when reading user-defined data
Mittel
CVE-2021-41199
Overflow/crash in `tf.image.resize` when size is large
Mittel
CVE-2021-37687
Heap OOB in TFLite's `Gather*` implementations
Mittel
CVE-2021-37682
Use of unitialized value in TFLite
Hoch
CVE-2021-37688
Null pointer dereference in TFLite
Mittel
CVE-2021-29614
Interpreter crash from `tf.io.decode_raw`
Niedrig
CVE-2021-29529
Heap buffer overflow caused by rounding
Niedrig
CVE-2021-29519
CHECK-fail in SparseCross due to type confusion
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.