Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 307
Restablecer filtrosThe Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory trave
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to cond
Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows rem
Improper Authentication in django-mfa3
SQL Injection in Django
SQL Injection in Django
Infinite Loop in Django
Cross-site Scripting in Django
Comment reply notifications sent to incorrect users
Cross-site Scripting in django-cms
Directory-traversal in Django
Information disclosure in Django
Denial-of-service in Django
Potential bypass of an upstream access control based on URL paths in Django
django-helpdesk is vulnerable to Cross-site Scripting
Cross-site Scripting in django-wiki
Cross-site Scripting in django-helpdesk
Cross-site Scripting in django-helpdesk
Cross-site scripting vulnerability in TinyMCE plugins
Cross-site Scripting in django-unicorn
Cross-site scripting in Unicorn framework
Unrestricted Upload of File with Dangerous Type in django-widgy
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.