Alta
CVE-2023-28836
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.855
Restablecer filtros
Media
CVE-2023-28837
Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files
Alta
CVE-2022-4899
zstd vulnerable to buffer overrun
Media
CVE-2022-23522
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Crítica
CVE-2023-1712
Use of hard-coded, security-relevant constants in deepset-ai/haystack
Media
CVE-2023-25661
TensorFlow Denial of Service vulnerability
Media
CVE-2023-28858
redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a pipeline operation), and can send
Alta
CVE-2023-28859
redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an
Alta
ghsa-cpmr-mw4j-99r7
Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/
Media
CVE-2023-1176
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.
Crítica
CVE-2023-1177
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
Alta
CVE-2023-25659
TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
Alta
CVE-2023-25666
TensorFlow has Floating Point Exception in AudioSpectrogram
Media
CVE-2023-25667
TensorFlow vulnerable to segfault when opening multiframe gif
Crítica
CVE-2023-25668
TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
Alta
CVE-2023-25671
TensorFlow has segmentation fault in tfg-translate
Alta
CVE-2023-25672
TensorFlow has Null Pointer Error in LookupTableImportV2
Alta
CVE-2023-25674
TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
Alta
CVE-2023-25801
TensorFlow has double free in Fractional(Max/Avg)Pool
Crítica
CVE-2018-25082
weixin-python XML External Entity vulnerability
Alta
CVE-2023-27586
CairoSVG improperly processes SVG files loaded from external resources
Media
CVE-2023-27494
Streamlit publishes previously-patched Cross-site Scripting vulnerability
Media
CVE-2023-25695
Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2.
Alta
CVE-2023-25617
SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.