Media
CVE-2019-16789
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.801
Restablecer filtros
Alta
ghsa-m5ff-3wj3-8ph4
HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Media
CVE-2019-16786
HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress
Media
CVE-2019-16785
HTTP Request Smuggling: LF vs CRLF handling in Waitress
Crítica
CVE-2019-19844
Django Potential account hijack via password reset form
Media
CVE-2019-12414
Users can view database names in Apache Superset
Media
CVE-2019-12413
Users able to query database metadata in Apache Superset
Baja
CVE-2019-16778
Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow
Crítica
CVE-2014-8650
Improper Authentication in requests-kerberos
Crítica
CVE-2013-2167
Insufficient Verification of Data Authenticity in python-keystoneclient
Crítica
CVE-2013-2166
Inadequate Encryption Strength in python-keystoneclient
Alta
CVE-2019-19588
Uncontrolled resource consumption in validators Python package
Alta
CVE-2019-19118
Django allows unintended model editing
Media
CVE-2019-16766
2FA bypass in Wagtail through new device path
Media
CVE-2019-10195
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This in
Alta
CVE-2019-19275
typed-ast Out-of-bounds Read
Alta
CVE-2019-19274
typed-ast Out-of-bounds Read
Alta
CVE-2019-10217
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Alta
CVE-2012-5578
Incorrect Default Permissions in keyring
Media
CVE-2015-5694
Designate does not enforce the DNS protocol limit concerning record set sizes
Media
CVE-2019-12417
Apache Airflow vulnerable to XSS and local file disclosure
Media
CVE-2014-1938
Link Following in rply
Crítica
CVE-2019-19010
Eval injection in Supybot/Limnoria
Alta
CVE-2014-7143
Python Twisted trustRoot is not respected in HTTP client
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.