Media
CVE-2024-28148
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.855
Restablecer filtros
Alta
CVE-2024-34246
wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in wasm3/platforms/app/main.c.
Crítica
CVE-2024-34249
wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/source/m3_compile.c.
Alta
CVE-2024-34252
wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3_compile.c.
Media
CVE-2024-34529
Nebari through 2024.4.1 prints the temporary Keycloak root password.
Media
CVE-2024-34528
WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because the conf_path os.open does not use a mode parameter during file creation.
Alta
CVE-2024-34510
Gradio before 4.20 allows credential leakage on Windows.
Baja
CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.
Crítica
CVE-2024-3955
CraftBeerPi 4 allows arbitrary code execution
Crítica
CVE-2024-33768
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
Media
CVE-2024-33766
lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.
Media
CVE-2024-33767
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.
Media
CVE-2024-33764
lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.
Alta
CVE-2024-33763
lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.
Media
CVE-2024-33664
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT b
Media
CVE-2024-32645
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, incorrect values can be logged when `raw_log` builtin is called with memory or storage argum
Media
CVE-2024-32649
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `sqrt` builtin can result in double eval vulnerability when the argument has side-
Media
CVE-2024-32648
vyper default functions don't respect nonreentrancy keys
Media
CVE-2024-32647
vyper performs double eval of raw_args in create_from_blueprint
Media
CVE-2024-32646
vyper performs double eval of the slice start/length args in certain cases
Media
CVE-2024-32481
vyper's range(start, start + N) reverts for negative numbers
Media
CVE-2024-31208
Synapse V2 state resolution weakness allows Denial of Service (DoS)
Media
ghsa-w228-rfpx-fhm4
cg vulnerable to an Open Redirect Vulnerability on Referer Header
Alta
ghsa-p72q-h37j-3hq7
dbt uses a SQLparse version with a high vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.