Baja
ghsa-879p-8gw4-mcpw
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 692
Restablecer filtros
Media
CVE-2024-24564
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte a
Media
CVE-2024-26149
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read posi
Baja
CVE-2024-0243
langchain Server-Side Request Forgery vulnerability
Baja
ghsa-c4cm-r9fh-jgj9
commonground-api-common unexploitable privilege escalation in JWT authentication middleware
Crítica
CVE-2024-24563
Vyper negative array index bounds checks
Baja
CVE-2024-24560
Vyper's external calls can overflow return data to return input buffer
Crítica
CVE-2024-24561
Vyper's bounds check on built-in `slice()` function can be overflowed
Media
CVE-2024-24567
Vyper's raw_call `value=` kwargs not disabled for static and delegate calls
Alta
CVE-2023-47115
Cross-site Scripting Vulnerability on Avatar Upload
Alta
CVE-2024-22419
concat built-in can corrupt memory in vyper
Alta
CVE-2023-46247
incorrect storage layout for contracts containing large arrays
Media
CVE-2023-49080
jupyter-server errors include tracebacks with path information
Crítica
CVE-2023-6018
Remote Code Execution due to Full Controled File Write in mlflow
Alta
CVE-2023-47117
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Crítica
CVE-2023-43791
Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens
Alta
CVE-2023-45815
Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context
Media
CVE-2023-42780
Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user had no permission to see those DAG
Alta
CVE-2023-41047
OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine
Alta
CVE-2023-42443
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Media
CVE-2023-39264
Apache Superset may expose internal traces on REST API endpoints
Media
CVE-2023-40015
Vyper: reversed order of side effects for some operations
Alta
CVE-2023-41039
Sandbox escape via various forms of "format".
Crítica
CVE-2023-39363
Vyper has incorrectly allocated named re-entrancy locks
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.