Crítica
CVE-2023-38686
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 692
Restablecer filtros
Alta
CVE-2023-38671
Heap buffer overflow in PaddlePaddle
Media
CVE-2023-38501
copyparty vulnerable to reflected cross-site scripting via k304 parameter
Media
CVE-2023-37902
ecrecover can return undefined data if signature does not verify
Media
ghsa-cw7j-v52w-fp5r
copyparty vulnerable to reflected cross-site scripting via hc parameter
Media
CVE-2023-37901
Indico vulnerable to Cross-Site-Scripting via confirmation prompts
Alta
CVE-2023-37474
copyparty vulnerable to path traversal attack
Alta
CVE-2023-37271
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Alta
CVE-2023-36814
Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module
Alta
CVE-2022-39335
Synapse does not apply enough checks to servers requesting auth events of events in a room
Media
CVE-2023-32675
Vyper's nonpayable default functions are sometimes payable
Alta
CVE-2023-30837
vyper vulnerable to storage allocator overflow
Crítica
ghsa-83fm-w79m-64r5
Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
Alta
CVE-2023-30629
Incorrect success value returned in vyper
Alta
CVE-2023-30620
mindsdb arbitrary file write when extracting a remotely retrieved Tarball
Media
CVE-2022-23522
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Alta
CVE-2023-26043
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Media
CVE-2023-23940
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Media
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Media
CVE-2022-4572
A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files of the file ubireader/ubifs/output.py of
Baja
CVE-2022-23531
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package
Baja
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Crítica
CVE-2022-44900
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file
Media
CVE-2022-41889
Segfault via invalid attributes in `pywrap_tfe_src.cc`
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.