Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtrosMCMS vulnerable to arbitrary code execution via crafted thumbnail
Apache Ranger Hive Plugin missing permissions check
ONOS vulnerable to Cross-site Scripting
Server-side template injection in beetl
Command injection in OpenTSDB
Cross Site Scripting in OpenTSDB
** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has
Apache StreamPark LDAP Injection vulnerability
Chosen Ciphertext Attack in Jose4j
Lightbend Alpakka Kafka logs credentials on debug level
Remote code execution in JFinal CMS
Arbitrary javascript injection in Apache Jena
PowerJob vulnerable to incorrect access control
XWiki Platform vulnerable to privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration
XWiki Platform vulnerable to code injection from account through AWM view sheet
XWiki Platform's async and display macro allow displaying and interacting with any document in restricted mode
XWiki Platform vulnerable to code injection from account through XWiki.SchedulerJobSheet
XWiki Platform vulnerable to code injection in display method used in user profiles
XWiki Platform vulnerable to code injection from view right on XWiki.ClassSheet
XWiki Platform vulnerable to code injection from account/view through VFS Tree macro
XWiki Platform vulnerable to page render failure due to broken translations
org.xwiki.platform:xwiki-platform-attachment-ui vulnerable to Code Injection
XWiki Platform vulnerable to privilege escalation from view right using Invitation.InvitationCommon
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.