Crítica
CVE-2017-14242
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
Media
CVE-2017-14241
Dolibarr ERP and CRM contain XSS Vulnerability
Alta
CVE-2017-14240
Dolibarr ERP and CRM Sensitive Data Disclosure
Media
CVE-2011-1475
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
Media
CVE-2012-3546
Authentication Bypass in Apache Tomcat
Media
CVE-2012-4431
Cross-Site Request Forgery in Apache Tomcat
Media
CVE-2012-5885
Improper Access Control in Apache Tomcat
Baja
CVE-2013-2013
The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the proc
Media
CVE-2017-14231
GeniXCMS denial of service (account blockage)
Media
CVE-2017-14239
Dolibarr cross-site scripting (XSS) vulnerability
Alta
CVE-2015-3250
Exposure of Sensitive Information to an Unauthorized Actor in Apache Directory LDAP API
Media
CVE-2017-12156
Moodle XSS Vulnerability
Alta
CVE-2016-8737
Apache Brooklyn is vulnerable to cross-site request forgery (CSRF)
Media
CVE-2014-9635
Jenkins HttpOnly flag not Set for session cookies
Media
CVE-2014-9634
Jenkins secure flag not set on session cookies
Alta
CVE-2015-1831
Incomplete exclude pattern in Apache Struts
Alta
CVE-2015-5144
Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP r
Alta
CVE-2015-5145
validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Media
CVE-2017-13761
Fastly Magento2 sensitive information disclosure
Media
CVE-2015-3880
phpBB Open Redirect
Media
CVE-2017-3165
Cross-site Scripting In Apache Brooklyn
Media
CVE-2015-3296
NodeBB Cross-site Scripting Vulnerability in Markdown Processing
Media
CVE-2017-12157
Moodle sensitive information disclosure
Crítica
CVE-2014-8684
CodeIgniter and Kohana vulnerable to PHP Object Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.