Media
CVE-2015-8748
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Crítica
CVE-2015-8747
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.
Alta
Explotada en ataques
CVE-2014-3120
Elasticsearch Improper Access Control vulnerability
Alta
CVE-2013-4271
Restlet Arbitrary Java Code Execution via a serialized object
Media
CVE-2010-1622
Improper Control of Generation of Code ('Code Injection') in Spring Framework
Alta
CVE-2013-4316
Code injection in Apache Struts
Alta
CVE-2013-4221
Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML
Alta
CVE-2015-7873
phpMyAdmin allows remote attackers to spoof content via the url parameter
Media
CVE-2015-8213
The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a
Alta
CVE-2015-8125
Symfony Vulnerable to Timing Attack
Media
CVE-2013-1821
Ruby vulnerable to denial of service
Media
CVE-2015-6524
Improper Input Validation in Apache ActiveMQ
Baja
CVE-2014-4986
phpMyAdmin cross-site scripting Vulnerability in Table or Column Names
Media
CVE-2015-0219
Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header,
Alta
CVE-2015-0221
The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service
Alta
CVE-2015-0222
ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate val
Media
CVE-2015-0220
The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct cr
Media
CVE-2015-6830
phpMyAdmin ReCaptcha bypass
Media
CVE-2015-5161
ZendXml and Zend Framework contain XXE and XEE Vulnerabilities
Media
CVE-2015-5964
The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sess
Media
CVE-2013-2248
Open redirect in Apache Struts
Media
CVE-2013-3827
Path Traversal in Eclipse Mojarra
Baja
CVE-2013-5002
phpMyAdmin Cross-site scripting (XSS) vulnerability via pageNumber value
Baja
CVE-2013-5583
Joomla! Cross-site Scripting vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.