Crítica
CVE-2019-14234
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.828
Restablecer filtros
Alta
CVE-2019-10099
Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk (contr
Alta
CVE-2019-14235
Uncontrolled Recursion in Django
Alta
CVE-2019-14233
Django Denial-of-service in strip_tags()
Alta
CVE-2019-14232
Django Denial-of-service in django.utils.text.Truncator
Media
CVE-2019-10156
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Alta
CVE-2019-10138
Improper Access Control in novajoin
Media
CVE-2019-1020006
Invenio-App vulnerable to host header injection attack
Media
CVE-2019-1020005
Cross-site Scripting in invenio-communities
Media
CVE-2019-1020003
Cross-site scripting invenio-records
Media
CVE-2019-1020019
Cross-site Scripting in invenio-previewer
Alta
CVE-2019-1010142
Infinite Loop in scapy
Crítica
CVE-2019-1010268
Improper Restriction of XML External Entity Reference in ladon
Alta
CVE-2019-1010083
Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage
Alta
CVE-2019-13611
python-engineio vulnerable to Cross-Site Request Forgery (CSRF)
Alta
CVE-2019-1010017
XML Injection in python-libnmap
Alta
CVE-2015-5306
Injection vulnerability that affects ironic-discoverd
Crítica
CVE-2019-13177
Improper Verification of Cryptographic Signature in django-rest-registration
Media
CVE-2019-12781
Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS
Media
CVE-2019-13114
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
Crítica
CVE-2019-12855
Improper Certificate Validation in Twisted
Media
CVE-2019-12387
Twisted CRLF Injection
Alta
CVE-2018-19802
Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function
Alta
CVE-2018-19801
Aubio is vulnerable to a NULL pointer dereference in new_aubio_filterbank
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.