Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.829
Restablecer filtrosExposure of Sensitive Information to an Unauthorized Actor in Requests
Exposure of Sensitive Information to an Unauthorized Actor in Requests
OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (pas
Plone and Zope2 affected by Race Condition
Plone allows remote attackers to read hidden folder contents
Plone and Zope2 vulnerable to unauthorized access to restricted attributes
HTTP header injection in Plone and Zope2
OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events
OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events
OpenStack Keystone Domain-scoped tokens don't get revoked
python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities
Incorrect Privilege Assignment in Jinja2
OpenStack Nova host data leak to vm instance in rescue mode
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initiali
Pillow Temporary file name leakage
OpenStack Identity (Keystone) DoS through V3 API authentication chaining
OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend
OpenStack Nova VMWare driver leaks rescued images
Creation of Temporary File With Insecure Permissions in logilab-commons
Improper Link Resolution Before File Access in logilab-commons
OpenStack Glance sensitive information disclosure via logs
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.