Alta
CVE-2026-33744
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 116
Restablecer filtros
Alta
CVE-2026-27953
ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor
Alta
CVE-2026-27696
changedetection.io is Vulnerable to SSRF via Watch URLs
Baja
CVE-2025-62780
changedetection.io: Stored XSS in Watch update via API
Crítica
CVE-2023-25574
LTI JupyterHub Authenticator does not properly validate JWT Signature
Alta
CVE-2024-24762
python-multipart vulnerable to Content-Type Header ReDoS
Alta
CVE-2023-36053
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large numb
Alta
CVE-2022-31006
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client co
Alta
CVE-2008-6547
schema.py in FormEncode for Python (python-formencode) 1.0 does not apply the chained_validators feature, which allows attackers to bypass intended access restrictions via unknown vectors.
Alta
CVE-2015-5144
Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP r
Alta
CVE-2015-5145
validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Alta
CVE-2021-45115
Denial-of-service in Django
Alta
CVE-2021-38305
Command injection in Yamale
Alta
CVE-2021-33571
Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
Media
CVE-2021-29510
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Media
CVE-2021-32052
Header injection possible in Django
Alta
CVE-2020-15225
Potential DoS with NumberFilter conversion to integer values.
Alta
CVE-2021-1725
botframework-connector vulnerable to Improper Authentication
Alta
CVE-2019-19588
Uncontrolled resource consumption in validators Python package
Alta
CVE-2017-18361
Pylons Colander Denial of Service vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.