Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Improper Limitation of a Pathname to a Restricted Directory in Apache Solr
Apache Ambari Open Redirect
Apache Ambari SSRF Vulnerability
Cross-site Scripting in SmartyException
queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.
FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this
Joomla! Framework Remote Code Injection Vulnerability
TYPO3 Cross-site Scripting vulnerability
TYPO3 CMS indexed search Cross-site Scripting vulnerability
TYPO3 allows remote attackers to embed Flash videos from external domain
Typo3 XSS Vulnerability
Dolibarr ERP and CRM contain XSS Vulnerabilities
Improper Neutralization of Input During Web Page Generation in Apache Solr
Improper Neutralization of Input During Web Page Generation in Apache Solr
phpMyAdmin cross-site scripting Vulnerability via ENUM value
Apache Ranger Cross-site Scripting vulnerability
Drupal Open Redirect
Drupal CRLF injection vulnerability in the drupal_set_header function
Apache Ranger allows users to bypass intended access restrictions via direct access to module URLs
Drupal Form API ignores access restrictions on submit buttons
Drupal saving user accounts can sometimes grant the user all roles
Apache Ranger allows users to bypass intended access restrictions via the REST API
Drupal Reflected file download vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.