Media
CVE-2008-2302
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.309
Restablecer filtros
Alta
CVE-2008-1937
The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges.
Alta
CVE-2008-0299
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by pred
Alta
CVE-2007-6738
pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the nu
Crítica
CVE-2007-5741
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity modul
Media
CVE-2007-1406
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.
Media
CVE-2022-24880
Potential Captcha Validate Bypass in flask-session-captcha
Alta
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization
Media
ghsa-cf4q-4cqr-7g7w
SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc
Alta
CVE-2022-28108
Selenium Server (Grid) CSRF
Alta
CVE-2022-24857
Improper Authentication in django-mfa3
Crítica
CVE-2022-28347
SQL Injection in Django
Alta
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error i
Crítica
CVE-2022-24801
Inconsistent Interpretation of HTTP Requests in twisted.web
Alta
CVE-2022-24798
Improper Removal of Sensitive Information Before Storage or Transfer in irrd
Alta
CVE-2022-22936
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying
Alta
CVE-2022-24757
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
Alta
CVE-2022-0315
Use of insecure temporary file in Horovod
Crítica
CVE-2022-26184
Poetry before v1.1.9 contains Untrusted Search Path
Crítica
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
Alta
CVE-2022-24761
HTTP Request Smuggling in waitress
Alta
CVE-2022-25510
Hard coded credentials in FreeTAKServer
Alta
CVE-2021-38296
Authentication Bypass by Capture-replay in Apache Spark
Media
CVE-2022-24737
Exposure of Sensitive Information to an Unauthorized Actor in httpie
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.