Crítica
CVE-2011-0720
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
Media
CVE-2011-0986
phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file
Media
CVE-2011-1058
Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote atta
Media
CVE-2011-1419
Apache Tomcat does not follow ServletSecurity annotations
Media
CVE-2011-1714
QooxDoo XSS in Callback Parameter
Crítica
CVE-2015-6941
win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.
Media
CVE-2015-2674
Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Python with the default CERT_NONE value for the cert_reqs argument.
Media
CVE-2013-4204
Improper Neutralization of Input During Web Page Generation in Google Web Toolkit
Alta
CVE-2017-12881
Spring Batch Admin vulnerable to Cross-site request forgery (CSRF) in the file upload functionality
Media
CVE-2017-12882
Spring Batch Admin vulnerable to Stored Cross-site scripting (XSS) in the file upload functionality
Alta
CVE-2015-5081
Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions via unspecified v
Crítica
CVE-2017-8658
ChakraCore RCE Vulnerability
Alta
CVE-2015-4082
attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository to obtain potentially sensitive informat
Alta
CVE-2010-4961
Webkit PDFs for TYPO3 has SQL Injection vulnerability
Alta
CVE-2010-4962
Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands
Baja
CVE-2010-5097
TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality
Media
CVE-2010-5101
TYPO3 Directory Traversal vulnerability
Media
CVE-2010-5099
TYPO3 Path Traversal vulnerability
Baja
CVE-2010-5100
TYPO3 Cross-Site Scripting vulnerability in the Install Tool
Baja
CVE-2010-5098
TYPO3 Cross-site scripting (XSS) vulnerability in the FORM content object
Media
CVE-2010-5103
TYPO3 SQL Injection vulnerability
Media
CVE-2010-5104
TYPO3 Sensitive Information Disclosure via escapeStrForLike method
Media
CVE-2011-2718
phpMyAdmin Directory Traversal Vulnerability
Media
CVE-2011-4107
phpMyAdmin vulnerable to XML external entity (XXE) injection attack
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.