Alta
CVE-2020-26261
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.999
Restablecer filtros
Media
CVE-2020-26249
Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability
Crítica
ghsa-mjcr-rqjg-rhg3
Implementation trusts the "me" field returned by the authorization server without verifying it
Media
CVE-2020-26232
Open redirect in Jupyter Server
Baja
CVE-2020-26215
Open redirect in Jupyter Notebook
Media
CVE-2020-15275
malicious SVG attachment causing stored XSS vulnerability
Crítica
CVE-2020-26214
LDAP authentication bypass with empty password
Media
CVE-2020-15278
Unauthorized privilege escalation in Mod module
Media
CVE-2020-26891
Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint
Crítica
CVE-2020-27197
libtaxii Server-Side Request Forgery vulnerability
Baja
CVE-2020-15239
Directory Traversal vulnerability in GET/PUT allows attackers to Disclose Information or Write Files via a crafted GET/PUT request
Alta
CVE-2020-15210
Segmentation fault in tensorflow-lite
Media
CVE-2020-15205
Data leak in Tensorflow
Media
CVE-2020-15163
Invalid root may become trusted root in The Update Framework (TUF)
Alta
CVE-2020-15147
Remote Code Execution in Red Discord Bot
Media
CVE-2020-15140
Remote Code Execution in Red Discord Bot
Crítica
CVE-2020-17446
Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer
Media
CVE-2020-15120
Authorization Bypass in I hate money
Alta
CVE-2020-15110
Possible pod name collisions in jupyterhub-kubespawner
Media
CVE-2020-15105
User passwords are stored in clear text in the Django session
Media
CVE-2020-4071
Timing attack on django-basic-auth-ip-whitelist
Media
CVE-2020-11078
CRLF injection in httplib2
Media
CVE-2016-1000111
Forced Browsing in Twisted
Alta
ghsa-m5ff-3wj3-8ph4
HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.