Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
hnswlib Double Free vulnerability
Connection confusion in gRPC
jcvi vulnerable to Configuration Injection due to unsanitized user input
kiwitcms vulnerable to stored XSS via unrestricted files upload
Reportlab vulnerable to remote code execution
PyPDF2 quadratic runtime with malformed PDF missing xref marker
PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
kiwitcms vulnerable to stored cross-site scripting via unrestricted file upload
Apache Airflow ODBC Provider Argument Injection vulnerability
Apache Airflow JDBC Provider Improper Input Validation vulnerability
Any file can be included with the pymdown-snippets extension
Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
Improper Restriction of Excessive Authentication Attempts in calibreweb
Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation
Weak Password Requirements in calibreweb
Unrestricted file upload in kiwi TCMS
kiwi TCMS has possibility for user to update email address to unverified one
git-url-parse Regular Expression Denial of Service
TensorFlow has Null Pointer Error in TensorArrayConcatV2
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
TensorFlow vulnerable to integer overflow in EditDistance
TensorFlow has Null Pointer Error in SparseSparseMaximum
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.