Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtrosJenkins AWS CodeDeploy Plugin has Insufficiently Protected Credentials
Jenkins meliora-testlab Plugin allows attackers with file system access to Jenkins master to obtain API key
Exposure of sensitive information vulnerability
Access controll bypass in Apache Tomcat
Access restriction bypass in Apache Tomcat
XWork in Apache Struts Reveals Sensitive Information
Improper Neutralization of Input During Web Page Generation in JAMon
Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters
Exposure of Sensitive Information to an Unauthorized Actor in Apache Sling Servlets Post
Improper Input Validation in Apache Qpid AMQP 0-x JMS
Improper Access Control in Apache Shiro
Improper Neutralization of Input During Web Page Generation in Apache Axis2
Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Apache Archiva does not require entry of the administrator's password at the time of modifying a user account
Exposure of Sensitive Information to an Unauthorized Actor in JBoss Fuse
Improper Input Validation in Bouncy Castle
Jenkins allows Cross-Site Scripting (XSS)
Jenkins affected by Open Redirect Vulnerability
Jenkins allows HTTP Injection and Response Splitting
Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness
Cross-site Scripting in Apache Struts
Arbitrary code execution in Apache Struts 2
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.