Crítica
CVE-2016-6903
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.801
Restablecer filtros
Crítica
CVE-2016-6902
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
Media
CVE-2017-7234
Django open redirect
Media
CVE-2017-7233
Django open redirect and possible XSS attack via user-supplied numeric redirect URLs
Alta
CVE-2016-9243
Improper input validation in cryptography
Alta
CVE-2016-10149
Pysaml2 does not sanitize XML responses
Media
CVE-2017-5524
Plone Sandbox Escape
Alta
CVE-2017-7235
cfscrape Improper Input Validation vulnerability
Media
CVE-2017-6591
django-epiceditor vulnerable to XSS in form field
Crítica
CVE-2016-10127
PySAML2 XML external entity attack
Media
CVE-2016-9910
Cross-site Scripting in html5lib
Media
CVE-2016-9909
Improper Neutralization of Input During Web Page Generation in html5lib
Media
CVE-2017-5992
Improper Restriction of XML External Entity Reference in Openpyxl
Crítica
CVE-2013-7459
Buffer Overflow in pycrypto
Media
CVE-2017-5591
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This
Alta
CVE-2016-10075
TDQM Arbitrary Code Execution
Alta
CVE-2016-6581
HPACK Denial of Service vulnerability (HPACK Bomb)
Alta
CVE-2016-5851
Improper Restriction of XML External Entity Reference in python-docx
Alta
CVE-2016-9964
bottle.py vulnerable to CRLF Injection
Alta
CVE-2016-9190
Arbitrary code using "crafted image file" approach affecting Pillow
Media
CVE-2016-9189
Pillow Integer overflow in Map.c
Media
CVE-2016-1241
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
Media
CVE-2016-1242
file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files
Media
CVE-2016-4911
OpenStack Identity Keystone Improper Access Control
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.