Alta
CVE-2016-3096
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.801
Restablecer filtros
Alta
CVE-2016-2533
Pillow buffer overflow in ImagingPcdDecode
Crítica
CVE-2016-4009
Pillow Integer overflow in ImagingResampleHorizontal
Alta
CVE-2016-0775
Pillow Buffer overflow in ImagingFliDecode
Media
CVE-2016-0740
Pillow Buffer overflow in ImagingLibTiffDecode
Crítica
CVE-2015-8557
Command Injection in Pygments
Crítica
CVE-2015-7337
Improper Input Validation in Jupyter Notebook
Media
CVE-2015-6938
Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
Media
CVE-2015-3219
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability
Alta
CVE-2015-5163
OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file
Alta
CVE-2015-3908
Ansible does not verify that the server hostname matches a domain name in certificates
Alta
CVE-2015-5143
Django Denial-of-service by filling session store
Alta
CVE-2015-1852
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configurati
Alta
CVE-2015-0260
RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.
Sin evaluar
CVE-2015-1613
RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.
Sin evaluar
CVE-2014-5277
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authe
Alta
CVE-2012-6661
Plone and Zope2 do not reseed pseudo-random number generator
Crítica
CVE-2011-4103
Django-piston and Django-tastypie do not properly deserialize YAML data
Crítica
CVE-2014-1929
python-gnupg vulnerable to shell injection
Alta
CVE-2014-1928
python-gnupg's shell_quote function does not properly escape characters
Alta
CVE-2014-1927
python-gnupg's shell_quote function does not properly quote strings
Media
CVE-2014-1830
Exposure of Sensitive Information to an Unauthorized Actor in Requests
Media
CVE-2014-1829
Exposure of Sensitive Information to an Unauthorized Actor in Requests
Alta
CVE-2014-7144
OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (pas
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.