Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 692
Restablecer filtroslxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through
Cross-site scripting vulnerability in TinyMCE plugins
Maliciously Crafted Model Archive Can Lead To Arbitrary File Write
StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
Cross-site Scripting in wagtail
Cross-Site Request Forgery (CSRF) in FastAPI
Reflected cross-site scripting issue in Datasette
Division by 0 in `QuantizedBatchNormWithGlobalNormalization`
CHECK-fail in tf.raw_ops.EncodePng
Division by 0 in `Conv2DBackpropInput`
Division by 0 in `Conv3DBackprop*`
VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption
SSRF attacks via tracebacks in Plone
Regular Expression Denial of Service (ReDoS) in Pillow
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager
Regular Expression Denial of Service (REDoS) in httplib2
Django Directory Traversal via archive.extract
Regular Expression Denial of Service in CairoSVG
Base class whitelist configuration ignored in OAuthenticator
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.