Media
CVE-2021-37661
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.016
Restablecer filtros
Media
CVE-2021-37646
Bad alloc in `StringNGrams` caused by integer conversion
Media
CVE-2021-37644
`std::abort` raised from `TensorListReserve`
Alta
CVE-2021-32811
Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope
Media
CVE-2021-23401
Open Redirect in Flask-User
Alta
CVE-2021-32633
Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that are available for direct use. By default
Media
CVE-2021-23393
Open redirect in Flask-Unchained
Alta
CVE-2021-32674
Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TA
Media
CVE-2021-29621
Observable Response Discrepancy in Flask-AppBuilder
Alta
CVE-2021-33880
Observable Timing Discrepancy in aaugustin websockets library
Alta
CVE-2021-33511
Server-Side Request Forgery in Plone
Media
CVE-2021-33510
Server-Side Request Forgery in Plone
Baja
CVE-2021-29542
Heap buffer overflow in `StringNGrams`
Baja
CVE-2021-29541
Null pointer dereference in `StringNGrams`
Media
CVE-2021-29471
Denial of service attack via push rule patterns in matrix-synapse
Crítica
CVE-2020-13921
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
Alta
ghsa-qrmm-w4v4-q7f8
Unauthorized access through URL manipulation
Crítica
CVE-2021-31800
Path traversal in impacket
Alta
CVE-2021-29434
Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
Alta
CVE-2021-29430
Sydent vulnerable to denial of service attack via memory exhaustion
Alta
CVE-2021-21392
Open redirect via transitional IPv6 addresses on dual-stack networks
Media
CVE-2021-21394
Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints
Media
CVE-2021-25925
Cross-site scripting in SiCKRAGE
Alta
CVE-2021-21431
Improper Input Validation in sopel-plugins.channelmgnt
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.