Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 445
Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`
Open Babel has out-of-bounds write in Gaussian coords_type orientation parser
Open Babel has out-of-bounds write in CSR PadString (title field)
Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)
Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow
Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt
Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies
Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
python-socketio: Binary attachment accumulation can cause denial of service
python-engineio has possible denial of service due to maximum payload size sometimes not being enforced
python-engineio has unbound thread allocation that can cause denial of service
Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id>
Lemur: JWT verifier honors attacker-supplied alg, enabling ATO
Lemur has an authorization bypass in StrictRolePermission / AuthorityCreatorPermission
Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF
Lemur user-update path stores plaintext passwords
joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.