Alta
CVE-2021-21431
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.319
Restablecer filtros
Media
CVE-2021-23980
Cross-site scripting in Bleach
Media
CVE-2021-3281
Django Directory Traversal via archive.extract
Alta
CVE-2020-26263
RSA weakness in tslite-ng
Alta
CVE-2020-26250
Base class whitelist configuration ignored in OAuthenticator
Media
CVE-2020-15275
malicious SVG attachment causing stored XSS vulnerability
Baja
ghsa-f366-4rvv-95x2
Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration
Media
CVE-2020-15211
Out of bounds access in tensorflow-lite
Media
CVE-2020-15120
Authorization Bypass in I hate money
Media
CVE-2020-10691
Path Traversal in Ansible
Media
CVE-2020-11010
SQL injection in Tortoise ORM
Media
CVE-2020-6802
XSS in Bleach when noscript and raw tag whitelisted
Media
CVE-2020-5252
Malicious package may avoid detection in python auditing
Media
CVE-2020-5240
2FA bypass through deleting devices in wagtail-2fa
Baja
CVE-2020-1733
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
Alta
CVE-2019-16784
Local Privilege Escalation in PyInstaller
Media
CVE-2019-16785
HTTP Request Smuggling: LF vs CRLF handling in Waitress
Sin evaluar
CVE-2019-12105
** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enable
Crítica
CVE-2019-13177
Improper Verification of Cryptographic Signature in django-rest-registration
Alta
CVE-2017-14158
Scrapy denial of service vulnerability
Media
CVE-2017-7233
Django open redirect and possible XSS attack via user-supplied numeric redirect URLs
Alta
CVE-2016-6581
HPACK Denial of Service vulnerability (HPACK Bomb)
Alta
CVE-2014-1402
Incorrect Privilege Assignment in Jinja2
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.