Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.999
Restablecer filtrosApache Airflow vulnerable to XSS and local file disclosure
Improper Verification of Cryptographic Signature in matrix-synapse
Cross-site scripting in Jupyter Notebook
Server-Side Request Forgery in unoconv
graphite.composer.views.send_email vulnerable to SSRF
High severity vulnerability that affects indico
** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enable
Open Redirect in httpie
Invenio-App vulnerable to host header injection attack
python-engineio vulnerable to Cross-Site Request Forgery (CSRF)
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
Improper Input Validation in python-dbusmock
Apache Airflow vulnerable to CSRF Attacks
CoAPthon DoS due to Exceptions
CoAPthon3 vulnerable to Deserialization of Untrusted Data
Open Redirect vulnerability in jupyterhub and notebook
splunk-sdk does not properly verify untrusted TLS server certificates
CRLF Injection in pypiserver
Improper Certificate Validation in Apache Airflow
Improper Input Validation in Apache Airflow resulting in Remote Code Execution
PyKMIP Denial of service vulnerability
Cross-Site Request Forgery (CSRF) in Luigi
Jupyter Notebook XSS via untrusted notebooks
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.