Media
CVE-2020-19003
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.829
Restablecer filtros
Media
CVE-2021-41122
missing clamps for decimal args in external functions
Alta
CVE-2021-41124
Splash authentication credentials potentially leaked to target websites
Media
CVE-2021-22557
Code Injection in SLO Generator
Alta
CVE-2021-40325
Cobbler before 3.3.0 allows authorization bypass for modification of settings.
Alta
CVE-2021-40324
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
Alta
CVE-2021-40323
Cobbler before 3.3.0 allows log poisoning
Media
CVE-2021-25963
Cross-site Scripting in shuup
Alta
CVE-2021-25962
CSV injection in shuup
Alta
CVE-2021-41104
Basic auth bypass in esphome
Alta
CVE-2021-3828
NLTK Vulnerable to REDoS
Alta
CVE-2021-31606
furlongm openvpn-monitor allows Authorization Bypass to disconnect arbitrary clients
Media
CVE-2021-31604
furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client
Alta
CVE-2020-23478
Regular Expression Denial of Service in Leo Editor
Alta
CVE-2021-3583
Improper Input Validation and Command Injection in Ansible
Alta
CVE-2021-39229
Apprise vulnerable to regex injection with IFTTT Plugin
Alta
CVE-2021-32838
Regular Expression Denial of Service in flask-restx
Alta
CVE-2021-32839
StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
Media
CVE-2021-39216
Wrong type for `Linker`-define functions when used across two `Engine`s
Crítica
CVE-2021-39214
Lacking Protection against HTTP Request Smuggling in mitmproxy
Alta
CVE-2021-40839
The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.
Media
CVE-2021-24040
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risk
Crítica
CVE-2021-38540
Missing Authentication for Critical Function in Apache Airflow
Media
CVE-2021-32805
Flask-AppBuilder Open Redirect vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.