Alta
CVE-2020-12607
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.309
Restablecer filtros
Media
CVE-2020-11078
CRLF injection in httplib2
Media
CVE-2020-10685
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Baja
CVE-2020-11054
Incorrect Provision of Specified Functionality in qutebrowser
Alta
CVE-2020-12690
Insufficient Session Expiration in OpenStack Keystone
Media
CVE-2020-11037
Potential Observable Timing Discrepancy in Wagtail
Media
CVE-2020-11010
SQL injection in Tortoise ORM
Media
CVE-2020-11001
Possible XSS attack in Wagtail
Alta
CVE-2020-6817
regular expression denial-of-service (ReDoS) in Bleach
Baja
ghsa-mr6r-mvw4-736g
Vyper interfaces returning integer types less than 256 bits can be manipulated if uint256 is used
Media
CVE-2020-6816
Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag
Media
CVE-2020-6802
XSS in Bleach when noscript and raw tag whitelisted
Crítica
CVE-2020-5262
GitHub personal access token leaking into temporary EasyBuild (debug) logs
Crítica
CVE-2020-10594
Django Rest Framework jwt allows obtaining new token from notionally invalidated token
Media
CVE-2020-5240
2FA bypass through deleting devices in wagtail-2fa
Crítica
CVE-2020-10109
HTTP Request Smuggling in Twisted
Baja
CVE-2020-1733
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
Alta
CVE-2020-7212
Uncontrolled Resource Consumption in urllib3
Crítica
CVE-2020-6174
Incorrect threshold signature computation in TUF
Media
CVE-2020-5236
Catastrophic backtracking in regex allows Denial of Service in Waitress
Alta
CVE-2020-7965
Cross-Site Request Forgery in Webargs
Media
CVE-2020-5227
Feedgen Vulnerable to XML Denial of Service Attacks
Baja
CVE-2020-5215
Segmentation faultin TensorFlow when converting a Python string to `tf.float16`
Media
CVE-2020-5224
Session key exposure through session list in Django User Sessions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.