Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 602
ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
ImageMagick: MSL image stack index may fail to refresh, leading to leaked images
ImageMagick has a heap buffer over-read in its MAP image decoder
ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder
ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
Image Magick has a Memory Leak in coders/ashlar.c
ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy
ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer
ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write
ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
ImageMagick: Code Injection via PostScript header in ps coders
ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions
ImageMagick has memory leak in msl encoder
Apache Superset allows authenticated users to view sensitive data without explicit permissions
Apache Superset Improper Authorization allows low-privileged users to bypass access controls
Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections
Apache Superset allows privileged users to conduct error-based SQL Injection
Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.