Baja
CVE-2013-5323
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
Baja
CVE-2013-5573
Jenkins allows Cross-Site Scripting (XSS) in User Configuration
Baja
CVE-2013-7078
TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework
Baja
CVE-2013-7074
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component
Media
CVE-2013-7082
TYPO3 Flow Cross-site scripting (XSS) vulnerability
Media
CVE-2013-7077
TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module
Baja
CVE-2014-1624
Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a
Media
CVE-2014-2059
Jenkins directory traversal vulnerability
Media
CVE-2014-2067
Jenkins cross-site scripting (XSS) vulnerability
Media
CVE-2014-3529
Improper Restriction of XML External Entity Reference in Apache POI
Alta
CVE-2014-3563
Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ss
Media
CVE-2014-3664
Jenkins Path Traversal vulnerability
Media
CVE-2014-3574
Improper Input Validation in Apache POI
Media
CVE-2015-3257
zend-diactoros Cross-site Scripting (XSS)
Alta
CVE-2016-8752
Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.
Media
CVE-2017-3153
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.
Media
CVE-2017-12870
SimpleSAMLphp Unauthenticated encryption in CBC mode
Media
CVE-2017-12871
SimpleSAMLphp Incorrect IV generation for encryption
Media
CVE-2014-8327
fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders
Alta
CVE-2014-8350
Smarty arbitrary PHP code execution
Media
CVE-2016-2512
The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cro
Baja
CVE-2016-2513
The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.
Crítica
CVE-2016-3086
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
Crítica
CVE-2017-14238
Dolibarr SQL injection vulnerability in admin/menus/edit.php
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.