Alta
CVE-2024-21543
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.861
Restablecer filtros
Media
CVE-2024-55633
Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access
Alta
CVE-2024-45404
OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious
Alta
pysec-2024-154
A number of releases of ultralytics contained malicious crypto miner software.
Alta
CVE-2024-21542
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive fu
Media
CVE-2024-46455
unstructured XML External Entity (XXE)
Crítica
CVE-2024-53947
Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions
Media
CVE-2024-53948
Apache Superset: Error verbosity exposes metadata in analytics databases
Media
CVE-2024-53949
Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled
Alta
CVE-2024-53908
Django SQL injection in HasKey(lhs, rhs) on Oracle
Media
CVE-2024-53907
Django denial-of-service in django.utils.html.strip_tags()
Alta
CVE-2024-12107
Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS
Media
CVE-2024-37303
Synapse's unauthenticated writes to the media repository allow planting of problematic content
Alta
CVE-2024-37302
Synapse denial of service through media disk space consumption
Alta
CVE-2024-54000
MobSF vulnerability allows SSRF due to the allow_redirects=True parameter
Sin evaluar
CVE-2024-52338
Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution. An application is vulnerable if it
Alta
ghsa-486g-47cc-8wxf
aiocpa contains credential harvesting code
Sin evaluar
pysec-2024-152
aiocpa 0.1.13 contains credential harvesting code
Alta
CVE-2024-27134
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU at
Alta
CVE-2024-53899
virtualenv allows command injection through activation scripts for a virtual environment
Alta
CVE-2024-11394
Deserialization of Untrusted Data in Hugging Face Transformers
Alta
CVE-2024-11393
Deserialization of Untrusted Data in Hugging Face Transformers
Alta
CVE-2024-11392
Deserialization of Untrusted Data in Hugging Face Transformers
Media
CVE-2024-53253
Sentry improper error handling leaks Application Integration Client Secret
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.