Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.070
Restablecer filtrosDCE extension for Typo3 Discloses Environment Information
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
DOMPDF denial of service vulnerability
DOMPDF Remote Code Execution
DOMPDF Information Disclosure
phpBB vulnerable to sensitive information disclosure
phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."
HTML Purifier Cross-site Scripting (XSS) vulnerability
phpMyAdmin Cross-site Scripting vulnerability
Drupal cross-site scripting vulnerability via actions feature and trigger module
powermail extension for TYPO3 vulnerable to SQL Injection
TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information
phpMyAdmin unsafely handles temporary files
Joomla! vulnerable to Cross-site Scripting
phpMyAdmin Open Redirect in redirector
HTML Purifier allows remote attackers to obtain sensitive information
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file
DOMPDF Remote File Inclusion Vulnerability
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
phpMyAdmin Multiple XSS Vulnerabilities
TYPO3 allows remote attackers to obtain the database name via a direct request
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.