Mittel
CVE-2023-52306
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.861
Filter zurücksetzen
Mittel
CVE-2023-38678
PaddlePaddle segfault in paddle.mode
Mittel
CVE-2023-38677
PaddlePaddle floating point exception in paddle.linalg.eig
Mittel
CVE-2023-52305
PaddlePaddle floating point exception in paddle.topk
Mittel
CVE-2023-38675
PaddlePaddle floating point exception in paddle.linalg.matrix_rank
Mittel
CVE-2023-51663
Hail relies on OIDC email claims to verify the validity of a user's domain.
Kritisch
CVE-2023-7152
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manip
Mittel
CVE-2023-6681
A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. Th
Mittel
CVE-2023-49438
An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on t
Hoch
CVE-2023-50731
GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182
Hoch
CVE-2023-51449
Gradio makes the `/file` secure against file traversal and server-side request forgery attacks
Niedrig
CVE-2023-51649
Nautobot missing object-level permissions enforcement when running Job Buttons
Mittel
CVE-2023-50783
Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable.
Mittel
CVE-2023-49920
Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website
Mittel
CVE-2023-47265
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG. Thi
Mittel
CVE-2023-48291
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write acce
Hoch
CVE-2023-7018
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
Hoch
CVE-2023-6976
MLflow Path Traversal Vulnerability
Hoch
CVE-2023-6977
MLflow Local File Disclosure Vulnerability
Kritisch
CVE-2023-6974
MLflow Server-Side Request Forgery (SSRF)
Kritisch
CVE-2023-6975
MLFlow Path Traversal Vulnerability
Hoch
CVE-2023-6909
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
Hoch
ghsa-9wgg-m99q-hhfc
Expired tokens can be renewed without validating the account password
Hoch
CVE-2023-6730
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.