Media
CVE-2012-5825
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
Media
CVE-2012-5886
Improper Authentication in Apache Tomcat
Media
CVE-2012-5887
Improper Authentication in Apache Tomcat
Baja
CVE-2012-5888
Basic SEO Features (seo_basics) extension TYPO3 vulnerable to Cross-site Scripting
Media
CVE-2012-5881
Cross-site scripting in yui 2.4.0
Baja
CVE-2012-5889
powermail extension for TYPO3 has Cross-site Scripting vulnerability
Media
CVE-2012-5890
Front End User Registration (sr_feuser_register) extension for TYPO3 allows remote attackers to obtain user names, passwords
Media
CVE-2012-6131
Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the @action parameter to support/issue1.
Media
CVE-2012-6132
Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter.
Media
CVE-2012-6130
Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link.
Baja
CVE-2012-6148
Typo3 Function Menu API XSS Vulnerability
Media
CVE-2012-6144
Typo3 Backend History Module Vulnerable to SQL Injection
Baja
CVE-2012-6147
Typo3 Backend API XSS Vulnerability
Baja
CVE-2012-6145
Typo3 Backend History Module Vulnerable to XSS
Alta
CVE-2013-1348
Symphony Vulnerable to PHP Code Injection via YAML Parsing
Alta
CVE-2013-1397
Symfony Arbitrary PHP code Execution
Media
CVE-2013-1879
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
Baja
CVE-2013-1840
The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obta
Media
CVE-2013-2254
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Sling
Media
CVE-2013-4249
Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbitr
Media
CVE-2013-4649
DotNetNuke (DNN) Cross-site scripting (XSS) vulnerability via the __dnnVariable parameter
Alta
CVE-2013-4748
News system (news) extension for TYPO3 vulnerable to SQL Injection
Baja
CVE-2013-5100
Static Methods since 2007 (div2007) extension for TYPO3 vulnerable to Cross-site Scripting
Alta
CVE-2013-5322
CoolURI extension for TYPO3 vulnerable to SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.