Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.801
Filter zurücksetzenImproper Neutralization of Input During Web Page Generation in IPython
IPython vulnerable to cross site request forgery (CSRF)
python-fedora vulnerable to an open redirect resulting in loss of CSRF protection
Apache Spark Deserialization of Untrusted Data vulnerability
Django vulnerable to XSS on 500 pages
Scrapy denial of service vulnerability
Designate mDNS DoS through incorrect handling of large RecordSets
Cross-site Scripting in Apache Atlas
Apache Atlas produces Stack trace in error response
Cross-site Scripting in Apache Atlas
Cross-site Scripting in Apache Atlas
Insecure cookie storage in Apache Atlas
The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other un
PyJWT vulnerable to key confusion attacks
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master v
Incorrect Default Permissions in Supervisor
OpenStack Compute (Nova) Improper Access Control
Lemur uses static IV per key
FedMsg not properly completing message validation
Loaded Databook of Tablib prone to python insertion resulting in command execution
Mercurial has Incorrect Permission Assignment for Critical Resource
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage wil
Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.