Media
CVE-2020-15140
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.984
Restablecer filtros
Crítica
CVE-2020-17446
Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer
Media
CVE-2020-15120
Authorization Bypass in I hate money
Alta
CVE-2020-15110
Possible pod name collisions in jupyterhub-kubespawner
Media
CVE-2020-15105
User passwords are stored in clear text in the Django session
Media
CVE-2020-4071
Timing attack on django-basic-auth-ip-whitelist
Media
CVE-2020-11078
CRLF injection in httplib2
Media
CVE-2016-1000111
Forced Browsing in Twisted
Alta
ghsa-m5ff-3wj3-8ph4
HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Media
CVE-2019-16785
HTTP Request Smuggling: LF vs CRLF handling in Waitress
Media
CVE-2019-12417
Apache Airflow vulnerable to XSS and local file disclosure
Alta
CVE-2019-18835
Improper Verification of Cryptographic Signature in matrix-synapse
Media
CVE-2018-21030
Cross-site scripting in Jupyter Notebook
Alta
CVE-2019-17400
Server-Side Request Forgery in unoconv
Alta
CVE-2017-18638
graphite.composer.views.send_email vulnerable to SSRF
Alta
ghsa-67cx-rhhq-mfhq
High severity vulnerability that affects indico
Sin evaluar
CVE-2019-12105
** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enable
Alta
CVE-2019-10751
Open Redirect in httpie
Media
CVE-2019-1020006
Invenio-App vulnerable to host header injection attack
Alta
CVE-2019-13611
python-engineio vulnerable to Cross-Site Request Forgery (CSRF)
Media
CVE-2019-13114
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
Alta
CVE-2015-1326
Improper Input Validation in python-dbusmock
Alta
CVE-2019-0229
Apache Airflow vulnerable to CSRF Attacks
Alta
CVE-2018-12680
CoAPthon DoS due to Exceptions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.