Media
CVE-2007-1406
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.856
Restablecer filtros
Alta
CVE-2006-5878
Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
Alta
CVE-2006-3695
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers t
Alta
CVE-2006-0847
Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.
Media
CVE-2005-4644
Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG t
Crítica
CVE-2021-41945
Improper Input Validation in httpx
Alta
CVE-2022-23942
Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure.
Media
CVE-2022-24880
Potential Captcha Validate Bypass in flask-session-captcha
Alta
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization
Media
ghsa-cf4q-4cqr-7g7w
SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc
Alta
CVE-2022-24845
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In affected versions, the return of `<iface>.returns_int128()` is not validated to fall within the bounds of `int128`. Thi
Media
CVE-2011-4924
Zope XSS Vulnerability
Alta
CVE-2022-28108
Selenium Server (Grid) CSRF
Media
CVE-2022-24859
Manipulated inline images can cause Infinite Loop in PyPDF2
Alta
CVE-2022-24857
Improper Authentication in django-mfa3
Crítica
CVE-2022-27479
Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.
Alta
CVE-2022-24788
Buffer Overflow in vyper
Crítica
CVE-2022-28347
SQL Injection in Django
Crítica
CVE-2022-28346
SQL Injection in Django
Alta
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error i
Crítica
CVE-2022-24801
Inconsistent Interpretation of HTTP Requests in twisted.web
Alta
CVE-2022-24787
Incorrect Comparison in Vyper
Crítica
CVE-2022-27177
Use of Externally-Controlled Format String in consoleme
Alta
CVE-2022-24798
Improper Removal of Sensitive Information Before Storage or Transfer in irrd
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.