Alta
CVE-2016-1927
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Alta
CVE-2016-2048
Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option w
Media
CVE-2016-2162
Apache Struts XSS Vulnerability
Media
CVE-2016-3093
Denial of service in Apache Struts
Crítica
CVE-2016-3082
Remote Code Execution in Apache Struts
Media
CVE-2016-6212
Drupal Views can allow unauthorized users to see Statistics information
Alta
CVE-2016-6211
Drupal Saving user accounts can sometimes grant the user all roles
Media
CVE-2016-6298
The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartex
Media
CVE-2016-9452
Drupal Denial of service via transliterate mechanism
Alta
CVE-2016-9187
Moodle Unrestricted file upload vulnerability
Alta
CVE-2016-9450
Drupal Incorrect cache context on password reset page
Media
CVE-2016-9188
Moodle XSS Vulnerability
Media
CVE-2015-1796
Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML
Alta
CVE-2016-5393
Improper Access Control in Apache Hadoop
Alta
CVE-2015-2171
Slim vulnerable to PHP object injection
Media
CVE-2015-2241
Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a m
Media
CVE-2015-2308
Symfony Vulnerable to PHP Eval Injection
Baja
CVE-2015-3010
ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.
Media
CVE-2016-2559
phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser
Media
CVE-2016-2562
phpMyAdmin Improper Input Validation
Media
CVE-2015-3397
Yii Framework Cross-site Scripting Vulnerability
Media
CVE-2015-3935
Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability
Media
CVE-2015-3982
The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the s
Baja
CVE-2015-3989
concrete5 vulnerable to Cross-site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.