Baja
CVE-2011-4340
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
Baja
CVE-2011-4782
phpMyAdmin Cross-site Scripting vulnerability
Media
CVE-2011-5245
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
Media
CVE-2012-0818
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
Media
CVE-2012-1006
Apache Struts Multiple Cross-site Scripting Vulnerabilities
Alta
CVE-2012-1176
Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence.
Media
CVE-2012-1188
Fork CMS Multiple XSS Vulnerabilities
Media
CVE-2012-1207
ForkCMS Directory Traversal vulnerability
Media
CVE-2012-1296
Elefant CMS Multiple XSS Vulnerabilities
Media
CVE-2012-2112
Typo3 Exception Handler XSS
Media
CVE-2012-2417
PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers t
Media
CVE-2012-3467
Apache QPID Allows Remote Authentication Bypass
Alta
CVE-2012-3447
virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an ima
Media
CVE-2012-3527
TYPO3 allows remote authenticated backend users to unserialize arbitrary objects
Baja
CVE-2012-3528
Typo3 Backend XSS Vulnerability
Baja
CVE-2012-3529
Typo3 Backend Configuration XSS Vulnerability
Media
CVE-2012-3530
Typo3 API XSS Vulnerability
Media
CVE-2012-3531
Typo3 Install Tool XSS Vulnerability
Media
CVE-2012-4386
Cross-Site Request Forgery in Apache Struts
Media
CVE-2012-4387
Denial of service in Apache Struts
Crítica
CVE-2012-4406
OpenStack Object Storage (swift) Code Injection vulnerability
Alta
CVE-2012-5563
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating
Media
CVE-2012-5785
Apache Axis2 has Improper Input Validation
Alta
CVE-2012-5817
Improper Input Validation in XFire
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.