Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtrosCross-site Scripting in Apache Struts
Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests
Apache Sling POST Servlets Denial of Service Vulnerability
Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables
Unescaped parameters in the PostgreSQL JDBC driver
Improper Access Control in JBoss mod_cluster
dotCMS allows remote authenticated users to execute arbitrary Java code
Improper Control of Generation of Code in Spring Security
Exposure of Sensitive Information to an Unauthorized Actor in Spring Security
User confusion in IronJacamar
Apache Axis2 Vulnerable to XML Signature wrapping attack
OpenID4Java does not verify that Attribute Exchange (AX) information is signed
Improper Authentication in Apache Qpid
Apache Rave information disclosure vulnerability
Lift Sensitive Information Disclosure
Alkacon OpenCMS XSS via title and requestedResource parameters
Eucalyptus Unauthorized Access to CC/NC Log Files
Improper Neutralization of Input During Web Page Generation in JavaMelody
Improper Authentication in OpenSAML
Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security
Apache Shindig PHP Sensitive Information Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.