Średnia
CVE-2023-24769
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 335
Wyczyść filtry
Wysoka
CVE-2023-25578
Denial of service vulnerability when parsing multipart request body
Wysoka
CVE-2023-24580
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart f
Wysoka
CVE-2023-25577
High resource usage when parsing multipart form data with many fields
Niska
CVE-2023-23934
Incorrect parsing of nameless cookies leads to __Host- cookies bypass
Wysoka
ghsa-344m-qcjq-xgrf
Vulnerable OpenSSL included in sgx-dcap-quote-verify-python
Niska
CVE-2023-24816
IPython vulnerable to command injection via set_term_title
Średnia
CVE-2023-23931
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
Średnia
CVE-2023-23940
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Średnia
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Średnia
CVE-2023-24622
isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF.
Niska
CVE-2023-23611
LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability
Krytyczna
CVE-2023-22884
Command Injection in Apache Airflow and Apache Airflow MySQL Provider
Wysoka
CVE-2021-32837
mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6. If a
Średnia
CVE-2016-15010
** UNSUPPPORTED WHEN ASSIGNED **** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerabi
Średnia
CVE-2022-4721
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Wysoka
ghsa-g86j-hwg9-77q5
SentinelOne impersonated via PyPI packages
Krytyczna
CVE-2022-46421
Apache Airflow Hive Provider vulnerable to Command Injection
Wysoka
CVE-2022-44940
Patchelf out-of-bounds read
Niska
CVE-2022-23531
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package
Niska
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Średnia
CVE-2022-4526
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photo_detail
Średnia
CVE-2022-32531
Apache Bookkeeper vulnerable to Improper Certificate Validation
Średnia
CVE-2022-23485
Sentry vulnerable to invite code reuse via cookie manipulation
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.