Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.801
Restablecer filtrosImproper Neutralization of Input During Web Page Generation in IPython
IPython vulnerable to cross site request forgery (CSRF)
python-fedora vulnerable to an open redirect resulting in loss of CSRF protection
Apache Spark Deserialization of Untrusted Data vulnerability
Django vulnerable to XSS on 500 pages
Scrapy denial of service vulnerability
Designate mDNS DoS through incorrect handling of large RecordSets
Cross-site Scripting in Apache Atlas
Apache Atlas produces Stack trace in error response
Cross-site Scripting in Apache Atlas
Cross-site Scripting in Apache Atlas
Insecure cookie storage in Apache Atlas
The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other un
PyJWT vulnerable to key confusion attacks
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master v
Incorrect Default Permissions in Supervisor
OpenStack Compute (Nova) Improper Access Control
Lemur uses static IV per key
FedMsg not properly completing message validation
Loaded Databook of Tablib prone to python insertion resulting in command execution
Mercurial has Incorrect Permission Assignment for Critical Resource
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage wil
Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.