Alta
CVE-2021-21996
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.828
Restablecer filtros
Alta
CVE-2021-23404
Cross-Site Request Forgery in sqlite-web
Alta
CVE-2021-23437
Uncontrolled Resource Consumption in pillow
Baja
CVE-2021-39164
Improper authorisation of members discloses room membership to non-members
Baja
CVE-2021-39163
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
Media
CVE-2020-19002
Mezzanine Cross Site Scripting (XSS) vulnerability
Crítica
CVE-2020-19001
Command Injection in Simiki
Media
CVE-2020-19000
Cross Site Scripting (XSS) in Simiki
Crítica
CVE-2021-39159
remote code execution via git repo provider
Alta
CVE-2021-39160
Code injection in nbgitpuller
Alta
CVE-2021-39371
XML External Entity Injection in PyWPS
Media
CVE-2020-18899
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.
Media
CVE-2021-39286
Cross-site scripting in pywb
Media
CVE-2020-18699
Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability
Crítica
CVE-2020-18698
Lin-CMS-Flask vulnerable to Improper Authentication
Sin evaluar
CVE-2020-18701
Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token up
Crítica
CVE-2020-18705
Improper Restriction of XML External Entity Reference in Quokka
Crítica
CVE-2020-18704
Unrestricted Upload of File with Dangerous Type in django-widgy
Crítica
CVE-2020-18703
Improper Restriction of XML External Entity Reference in Quokka
Media
CVE-2020-18702
Cross Site Scripting (XSS) in Quokka
Media
CVE-2021-35936
Missing Authorization in Apache Airflow
Media
CVE-2021-23423
Path Traversal in bikshed
Alta
CVE-2021-23422
OS Command Injection in bikeshed
Crítica
CVE-2021-37705
Improper Authorization and Origin Validation Error in OneFuzz
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.