Alta
CVE-2024-53908
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 307
Restablecer filtros
Media
CVE-2024-53907
Django denial-of-service in django.utils.html.strip_tags()
Media
CVE-2024-11319
django CMS Cross-Site Scripting (XSS)
Baja
CVE-2024-45231
Django allows enumeration of user e-mail addresses
Media
CVE-2024-45230
An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via ver
Media
CVE-2024-47082
Cross-Site Request Forgery (CSRF) in strawberry-graphql
Media
CVE-2024-41990
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with
Media
CVE-2024-41989
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in
Crítica
CVE-2024-42005
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a cr
Media
CVE-2024-41991
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service
Alta
CVE-2024-39614
Django vulnerable to Denial of Service
Alta
CVE-2024-39330
Django Path Traversal vulnerability
Media
CVE-2024-39329
Django vulnerable to user enumeration attack
Alta
CVE-2024-38875
Django vulnerable to Denial of Service
Media
CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Media
CVE-2024-38357
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Media
CVE-2024-27351
Regular expression denial-of-service in Django
Alta
CVE-2024-24680
Django denial-of-service attack in the intcomma template filter
Media
CVE-2024-23633
Cross-site Scripting Vulnerability on Data Import
Alta
CVE-2023-47115
Cross-site Scripting Vulnerability on Avatar Upload
Media
CVE-2024-23341
html injection vulnerability in the `tuitse_html` function.
Baja
CVE-2023-50263
Unauthenticated db-file-storage views
Alta
CVE-2023-48705
Cross-site Scripting potential in custom links, job buttons, and computed fields
Alta
CVE-2023-47117
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.