Wysoka
CVE-2023-48705
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 355
Wyczyść filtry
Krytyczna
CVE-2023-46302
Apache Software Foundation Apache Submarine has a bug when serializing against yaml. The bug is caused by snakeyaml https://nvd.nist.gov/vuln/detail/CVE-2022-1471 .
Krytyczna
ghsa-x563-6hqv-26mr
Ibis PyArrow dependency allows arbitrary code execution when loading a malicious data file
Krytyczna
CVE-2023-47248
PyArrow: Arbitrary code execution when loading a malicious data file
Wysoka
CVE-2023-48056
PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.
Średnia
CVE-2023-47627
AIOHTTP has problems in HTTP parser (the python one, not llhttp)
Niska
CVE-2023-47641
Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` differing in C and Python fallbacks
Wysoka
CVE-2023-46446
AsyncSSH Rogue Session Attack
Średnia
CVE-2023-46445
AsyncSSH Rogue Extension Negotiation
Wysoka
CVE-2023-47117
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Średnia
CVE-2023-47037
We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then.
Wysoka
CVE-2023-42781
Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. This is a
Krytyczna
CVE-2023-47128
piccolo SQL Injection via named transaction savepoints
Krytyczna
CVE-2023-43791
Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens
Wysoka
CVE-2023-44398
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable fu
Wysoka
CVE-2023-43665
In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of s
Średnia
CVE-2023-41164
In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large n
Wysoka
CVE-2023-46695
An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is su
Średnia
CVE-2023-43796
Synapse vulnerable to leak of remote user device information
Wysoka
CVE-2023-46215
Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability
Średnia
CVE-2023-46137
twisted.web has disordered HTTP pipeline response
Średnia
CVE-2023-46136
Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
Wysoka
CVE-2023-46128
Nautobot vulnerable to exposure of hashed user passwords via REST API
Średnia
CVE-2023-46288
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.4.0 to 2.7.0.
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.