Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 240
Restablecer filtrosGuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
ansible-runner vulnerable to Race Condition
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Path Traversal in django-s3file
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allo
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows r
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than
Flask-AppBuilder Open Redirect vulnerability
Incorrect validation of `SaveV2` inputs
Null pointer dereference in `SparseTensorSliceDataset`
Memory access due to code generation flaw in Cranelift module
Open Redirect in Flask-Security-Too
Heap out of bounds read in `RaggedCross`
Invalid validation in `SparseMatrixSparseCholesky`
Type confusion during tensor casts lead to dereferencing null pointers
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
Key Caching behavior in the DynamoDB Encryption Client.
Lack of validation in data format attributes in TensorFlow
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
Uncontrolled Resource Consumption in urllib3
HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a U
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.