Wysoka
CVE-2021-4286
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 6 855
Wyczyść filtry
Wysoka
CVE-2022-45197
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.
Wysoka
CVE-2022-40899
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
Wysoka
CVE-2022-40898
An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
Wysoka
CVE-2022-40897
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
Średnia
CVE-2022-4644
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.
Wysoka
CVE-2022-4646
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.
Średnia
CVE-2022-4638
A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The man
Krytyczna
CVE-2022-46421
Apache Airflow Hive Provider vulnerable to Command Injection
Wysoka
CVE-2022-44940
Patchelf out-of-bounds read
Średnia
CVE-2022-4572
A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files of the file ubireader/ubifs/output.py of
Niska
CVE-2022-23531
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package
Niska
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Średnia
CVE-2022-4526
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photo_detail
Średnia
CVE-2022-4527
A vulnerability was found in collective.task up to 3.0.9. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.
Średnia
CVE-2022-32531
Apache Bookkeeper vulnerable to Improper Certificate Validation
Średnia
CVE-2022-4495
A vulnerability, which was classified as problematic, has been found in collective.dms.basecontent up to 1.6. This issue affects the function renderCell of the file src/collective/dms/basecontent/brow
Wysoka
CVE-2019-25078
A vulnerability classified as problematic was found in pacparser up to 1.3.x. Affected by this vulnerability is the function pacparser_find_proxy of the file src/pacparser.c. The manipulation of the a
Krytyczna
CVE-2022-4314
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.
Średnia
CVE-2022-23485
Sentry vulnerable to invite code reuse via cookie manipulation
Średnia
CVE-2022-23491
Certifi removing TrustCor root certificate
Krytyczna
CVE-2022-46742
PaddlePaddle vulnerable to Code Injection
Krytyczna
CVE-2022-44900
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file
Wysoka
CVE-2022-23472
Passeo uses insecure random number generator
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.