Alta
CVE-2018-12679
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.984
Restablecer filtros
Media
CVE-2019-10255
Open Redirect vulnerability in jupyterhub and notebook
Crítica
CVE-2019-5729
splunk-sdk does not properly verify untrusted TLS server certificates
Media
CVE-2019-6802
CRLF Injection in pypiserver
Alta
CVE-2018-20245
Improper Certificate Validation in Apache Airflow
Alta
CVE-2017-15720
Improper Input Validation in Apache Airflow resulting in Remote Code Execution
Alta
CVE-2018-1000872
PyKMIP Denial of service vulnerability
Alta
CVE-2018-1000843
Cross-Site Request Forgery (CSRF) in Luigi
Media
CVE-2018-19351
Jupyter Notebook XSS via untrusted notebooks
Alta
CVE-2018-1000805
Paramiko Authentication Bypass vulnerability
Alta
CVE-2018-1000518
websockets is vulnerable to denial of service by memory exhaustion
Crítica
CVE-2016-9587
Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems
Alta
CVE-2018-1000164
Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
Crítica
CVE-2018-7750
Paramiko not properly checking authentication before processing other requests
Sin evaluar
CVE-2018-1000083
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via
Sin evaluar
CVE-2018-1000082
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server
Sin evaluar
CVE-2018-1000081
Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing. This attack appear to be exploitable via An attacker can
Sin evaluar
CVE-2018-1000080
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user. This attack appear to be exploitable v
Media
CVE-2017-1000246
Pysaml2 improperly initializes encryption vector
Crítica
CVE-2017-0906
Recurly vulnerable to SSRF
Alta
CVE-2017-11610
Incorrect Default Permissions in Supervisor
Alta
CVE-2017-9462
Mercurial has Incorrect Permission Assignment for Critical Resource
Media
CVE-2017-7234
Django open redirect
Alta
CVE-2015-3908
Ansible does not verify that the server hostname matches a domain name in certificates
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.