Kritisch
CVE-2022-3167
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.855
Filter zurücksetzen
Mittel
CVE-2022-36082
mangadex-downloader vulnerable to unauthorized file reading
Hoch
CVE-2022-36070
Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
Hoch
CVE-2022-36069
Poetry Argument Injection can lead to Local Code Execution
Hoch
CVE-2022-40023
mako is vulnerable to Regular Expression Denial of Service
Hoch
CVE-2022-31020
Indy's NODE_UPGRADE transaction vulnerable to remote code execution
Hoch
CVE-2022-38369
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
Hoch
CVE-2022-30331
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequently, an attacker can execute arbitrary C++
Hoch
CVE-2022-31152
Denial of service due to incorrect application of event authorization rules
Mittel
CVE-2022-38170
Apache Airflow exposes arbitrary file content
Kritisch
CVE-2022-38054
Apache Airflow Session Fixation vulnerability
Kritisch
CVE-2022-39227
python-jwt vulnerable to token forgery with new claims
Kritisch
CVE-2022-2996
python-scciclient vulnerable to Man-in-the-middle (MITM) attacks
Mittel
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Mittel
CVE-2022-0718
python-oslo-utils has improper password parsing
Kritisch
CVE-2022-34668
NVFLARE unsafe deserialization due to Pickle
Kritisch
CVE-2022-38792
exotel-py includes code execution backdoor inserted by a third party
Kritisch
CVE-2021-3563
Openstack Keystone Incorrect Authorization vulnerability
Nicht bewertet
pysec-2022-252
The deep-translator project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and download
Nicht bewertet
pysec-2022-251
The spam project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran
Nicht bewertet
pysec-2022-250
The exotel project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ra
Mittel
CVE-2021-3427
Deluge Web-UI vulnerable to XSS through a crafted torrent file
Hoch
CVE-2022-2255
Incorrect header handling in mod-wsgi
Hoch
CVE-2021-42521
VTK NULL pointer dereference vulnerability
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.