Media
CVE-2014-4301
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2016-6345
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
Crítica
CVE-2016-4972
OpenStack Murano Code Execution
Alta
CVE-2016-6801
Apache Jackrabbit Authentication Hijacking Vulnerability
Media
CVE-2016-7570
Drupal Users without "Administer comments" can set comment visibility on nodes they can edit
Media
CVE-2016-7572
Drupal Unprivileged access to config export
Media
CVE-2016-7571
Drupal Cross-site scripting (XSS) vulnerability
Alta
CVE-2013-2185
Deserialization of Untrusted Data in Apache Tomcat
Media
CVE-2012-6092
Cross-site Scripting in Apache ActiveMQ
Media
CVE-2013-1880
Apache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet
Media
CVE-2012-6551
Apache ActiveMQ default configuration subject to denial of service
Media
CVE-2013-3060
Improper Authentication in Apache ActiveMQ
Media
CVE-2013-4347
The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess
Alta
CVE-2013-4346
The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.
Alta
CVE-2013-4701
PHP OpenID Library Denial of Service vulnerability
Alta
CVE-2013-6418
PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate.
Media
CVE-2013-6444
PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle
Media
CVE-2013-7073
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component
Media
CVE-2014-5325
Exposure of Sensitive Information to an Unauthorized Actor in Direct Web Remoting
Media
CVE-2014-9508
Typo3 Open Redirect In Frontend Rendering
Media
CVE-2015-1776
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
Alta
CVE-2015-5723
Doctrine Security Misconfiguration Vulnerability
Crítica
CVE-2015-7695
Zend Framework SQL injection vector using null byte for PDO
Crítica
CVE-2016-1505
Radicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.