Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.828
Restablecer filtrosCode Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible
Malicious package may avoid detection in python auditing
SVGlib Vulnerable to XXE Attacks
GitHub personal access token leaking into temporary EasyBuild (debug) logs
django-nopassword stores secrets in cleartext
Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible
Argument Injection in Ansible
Incorrect Permission Assignment for Critical Resource in Ansible
Path Traversal in Ansible
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Django Rest Framework jwt allows obtaining new token from notionally invalidated token
Potential buffer overflow in psd-tools
2FA bypass through deleting devices in wagtail-2fa
Exposure of Sensitive Information to an Unauthorized Actor in Ansible
HTTP Request Smuggling in Twisted
Improper Input Validation in Twisted
Forced Browsing in Twisted
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
Path Traversal in Ansible
Uncontrolled Resource Consumption in urllib3
Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suit
OS Command Injection in ansible
An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users' information, including hashed pas
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.