Alta
CVE-2016-8744
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
Media
CVE-2017-14762
GeniXCMS Cross-site Scripting (XSS) via id parameter
Media
CVE-2017-14765
GeniXCMS Cross-site Scripting (XSS) via the Menu ID field
Alta
CVE-2017-14764
GeniXCMS arbitrary PHP code execution
Media
CVE-2017-14761
GeniXCMS Cross-site Scripting (XSS) vulnerability via id parameter
Media
CVE-2015-5963
contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (
Media
CVE-2015-7316
Cross-site scripting (XSS) vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1.
Media
CVE-2015-7315
Plone unauthorized member addition vulnerability
Alta
CVE-2015-7318
Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses.
Media
CVE-2017-14920
eGroupware Community Edition Stored XSS vulnerability
Alta
CVE-2015-7293
Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.
Alta
CVE-2017-5192
When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all aut
Media
CVE-2017-9794
Apache Geode gfsh query vulnerability
Media
CVE-2017-14775
Laravel Sensitive Data Exposure
Crítica
CVE-2017-12621
Improper Restriction of XML External Entity Reference in Jelly
Media
CVE-2014-0043
Apache Wicket allows attackers to check for third-party libraries
Alta
CVE-2017-1000093
Jenkins Poll SCM Plugin vulnerable to Cross-Site Request Forgery
Media
CVE-2017-1000094
Jenkins Docker Commons Plugin allows any user with Overall/Read permission to get list of valid credentials IDs
Alta
CVE-2017-1000092
Cross-Site Request Forgery in Jenkins Git Plugin
Media
CVE-2017-1000091
Jenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery
Baja
CVE-2017-1000114
Exposure of Sensitive Information in Jenkins Datadog plugin
Alta
CVE-2017-11797
ChakraCore RCE Vulnerability
Alta
CVE-2017-11801
ChakraCore RCE Vulnerability
Media
CVE-2017-1000109
Persistent XSS vulnerability in Jenkins OWASP Dependency-Check Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.