Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.984
Restablecer filtrosCode injection in FreeIPA
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
Path traversal in Matrix Synapse
Heap OOB in `FusedBatchNorm` kernels
Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
incomplete JupyterHub logout with simultaneous JupyterLab sessions
Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui
The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in h
Basic auth bypass in esphome
Lacking Protection against HTTP Request Smuggling in mitmproxy
Improper authorisation of members discloses room membership to non-members
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
XML External Entity Injection in PyWPS
Missing Authorization in Apache Airflow
Crash caused by integer conversion to unsigned
Bad alloc in `StringNGrams` caused by integer conversion
`std::abort` raised from `TensorListReserve`
Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope
Open Redirect in Flask-User
Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that are available for direct use. By default
Open redirect in Flask-Unchained
Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TA
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.