Media
CVE-2016-3170
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Alta
CVE-2015-5303
The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the
Alta
CVE-2016-3163
Drupal Brute force amplification attacks via XML-RPC
Alta
CVE-2016-0735
Apache Ranger Access Restriction Bypass
Alta
CVE-2016-3167
Drupal Open redirect vulnerability in the drupal_goto function
Media
CVE-2016-0711
Apache Jetspeed vulnerable to Cross-site Scripting
Alta
CVE-2016-0710
Apache Jetspeed vulnerable to SQL Injection
Alta
CVE-2016-0709
Path Traversal in Apache Jetspeed
Media
CVE-2014-6276
schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing
Media
CVE-2016-0712
Cross-site Scripting in Apache Jetspeed
Alta
CVE-2015-5271
The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storage (Swift) staticweb middleware in the swiftproxy pipeline wh
Alta
CVE-2016-3162
Drupal File upload access bypass and denial of service
Baja
CVE-2013-5679
Missing Cryptographic Step in OWASP Enterprise Security API for Java
Alta
CVE-2016-3171
Drupal arbitrary code execution
Alta
CVE-2016-4423
Symphony Denial of Service Via Overlong Usernames
Alta
CVE-2016-1902
Symfony Cryptographic Vulnerability
Baja
CVE-2011-4344
Jenkins allows Cross-Site Scripting (XSS)
Media
CVE-2014-2060
Jenkins allows Remote Attackers to Hijack Sessions
Media
CVE-2013-7330
Jenkins allows attackers to configure restricted projects
Media
CVE-2014-2058
Jenkins allows attackers to execute arbitrary jobs
Media
CVE-2014-2063
Jenkins Vulnerable to Clickjacking
Media
CVE-2014-2062
Jenkins does not invalidate the API token when a user is deleted
Media
CVE-2014-2061
Jenkin allows attackers to obtain passwords by reading the HTML source code
Media
CVE-2014-2064
Jenkins allows attackers to determine whether a user exists
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.