Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 851
Restablecer filtrosZend-Form vulnerable to Cross-site Scripting
Zend-Session session validation vulnerability
ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`
ZendFramework has potential Cross-site Scripting vector in multiple view helpers
Zendframework session validation vulnerability
Zendframework has potential Cross-site Scripting vector in multiple view helpers
Unsafe Reflection in base Component class in yiisoft/yii2
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
Symfony allows direct access of ESI URLs behind a trusted proxy
ScnSocialAuth Cross-site Scripting vulnerability in login redirect param
SimpleSAMLphp Reflected Cross-site Scripting vulnerability
SimpleSAMLphp Link Injection vulnerability
silverstripe/framework SQL injection in full text search
SilverStripe comments module includes version of jQuery vulnerable to Cross-site Scripting
Passbolt API Stored XSS on first/last name during setup
Neos Flow Information disclosure in entity security
Magento Patch SUPEE-10752 - Multiple security enhancements vulnerabilities
FOSRestBundle issue with broken validation of JSONP callbacks
Drupal Cross-Site Scripting (XSS) affecting CKEditor Third-party library
Drupal core Arbitrary PHP code execution
Drupal core uses a vulnerable Third-party library CKEditor
Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar
Drupal core Cross-Site Scripting (XSS) vulnerabilities
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.