Alta
CVE-2020-36407
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.828
Restablecer filtros
Alta
CVE-2021-25951
XML2Dict XML Entity Expansion Vulnerability
Alta
CVE-2021-33503
Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
Alta
CVE-2021-29063
ReDOS in Mpmath
Media
CVE-2021-33507
Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone
Alta
CVE-2021-32633
Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that are available for direct use. By default
Media
CVE-2021-33026
Deserialization of Untrusted Data in Flask-Caching
Media
CVE-2021-32681
Cross-site Scripting in wagtail
Media
CVE-2021-23393
Open redirect in Flask-Unchained
Alta
CVE-2021-32674
Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TA
Alta
CVE-2021-34363
The Fuck Arbitrary File Deletion via Path Traversal
Alta
CVE-2021-32677
Cross-Site Request Forgery (CSRF) in FastAPI
Sin evaluar
CVE-2021-3533
A flaw was found in Ansible if an ansible user sets ANSIBLE_ASYNC_DIR to a subdirectory of a world writable directory. When this occurs, there is a race condition on the managed machine. A malicious,
Alta
CVE-2021-33571
Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
Media
CVE-2021-33203
Path Traversal in Django
Media
CVE-2021-32670
Reflected cross-site scripting issue in Datasette
Media
CVE-2021-29621
Observable Response Discrepancy in Flask-AppBuilder
Alta
CVE-2021-33880
Observable Timing Discrepancy in aaugustin websockets library
Media
CVE-2021-28678
Insufficient Verification of Data Authenticity in Pillow
Alta
CVE-2021-28677
Uncontrolled Resource Consumption in Pillow
Alta
CVE-2021-28676
Potential infinite loop in Pillow
Alta
CVE-2021-25288
Pillow Out-of-bounds Read vulnerability
Alta
CVE-2021-25287
Out-of-bounds Read in Pillow
Alta
CVE-2021-28675
Pillow denial of service
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.