Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
TensorFlow has Floating Point Exception in AudioSpectrogram
TensorFlow vulnerable to segfault when opening multiframe gif
TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
TensorFlow has segmentation fault in tfg-translate
TensorFlow has Null Pointer Error in LookupTableImportV2
TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
TensorFlow has double free in Fractional(Max/Avg)Pool
Moodle may allow students to bypass sequential navigation during a quiz attempt
TH Side Cart and Menu Cart for Woocommerce <= 1.1.1 - Cross-Site Request Forgery
Spring Framework vulnerable to denial of service via specially crafted SpEL expression
Spring Vault vulnerable to insertion of sensitive information into a log file
Moodle may display roles to users who don't have access to them
NotrinosERP vulnerable to SQL Injection
Moodle arbitrary file read vulnerability
Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input
Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional
Moodle vulnerable to Cross-site Scripting
Moodle SQL Injection vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.