Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.358
Restablecer filtrosApache Airflow Spark Provider vulnerable to improper input validation
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
tripleo-ansible may disclose important configuration details from an OpenStack deployment
tripleo-ansible may disclose important configuration details from an OpenStack deployment
Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
openstack-neutron uncontrolled resource consumption flaw
Vulnerable OpenSSL included in cryptography wheels
Denial of service vulnerability on Password reset page
Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information
Path traversal in spotipy
No protection against brute-force attacks on login page
Apache Airflow Google Provider Improper Input Validation vulnerability
Pyload Insufficient Session Expiration vulnerability
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
OpenStack Kolla sudo privilege escalation vulnerability
pgadmin4 vulnerable to Code Injection
Cross-site Scripting in kiwitcms
MobSF allows attackers to read arbitrary files via a crafted HTTP request
When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
jwcrypto token substitution can lead to authentication bypass
Inventree vulnerable to Stored Cross-site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.