Media
CVE-2021-41198
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.829
Restablecer filtros
Media
CVE-2021-41197
Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes
Media
CVE-2021-41196
Crash in `max_pool3d` when size argument is 0 or negative
Media
CVE-2021-41195
Crash in `tf.math.segment_*` operations
Media
CVE-2021-41247
incomplete JupyterHub logout with simultaneous JupyterLab sessions
Alta
CVE-2020-10378
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
Media
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
Alta
CVE-2020-26705
The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to expose sensitive data or perform a denial of service (DOS) via
Crítica
CVE-2021-41194
Improper Access Control in jupyterhub-firstuseauthenticator
Crítica
CVE-2021-41078
Nameko Arbitrary code execution due to YAML deserialization
Crítica
CVE-2021-42343
An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client (which defaults
Alta
ghsa-v988-828w-xvf2
Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui
Alta
CVE-2021-41127
Maliciously Crafted Model Archive Can Lead To Arbitrary File Write
Alta
CVE-2021-41146
Arbitrary command execution on Windows via qutebrowserurl: URL handler
Alta
CVE-2021-42771
Directory Traversal in Babel
Media
CVE-2021-41131
Client metadata path-traversal
Alta
CVE-2021-42576
Policies not properly enforced in bluemonday
Crítica
CVE-2021-41132
Inconsistent input sanitisation leads to XSS vectors
Alta
CVE-2021-40978
The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in h
Media
CVE-2021-42134
Cross-site Scripting in django-unicorn
Media
CVE-2021-42053
Cross-site scripting in Unicorn framework
Media
CVE-2021-41125
Scrapy HTTP authentication credentials potentially leaked to target websites
Alta
CVE-2021-41121
Memory corruption when returning a literal struct with a private call inside of it
Media
CVE-2021-28125
Open Redirect in Apache Superset
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.