Alta
CVE-2017-1000419
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.686
Media
CVE-2017-1000491
Shiba vulnerable to XSS leading to code execution
Media
CVE-2017-1000467
Stored XSS in LavaLite 5.2.4
Media
CVE-2017-1000482
Products.CMFPlone XSS in profile home_page property
Crítica
CVE-2017-1000469
Cobbler vulnerable to arbitrary code execution
Media
CVE-2017-1000495
QuickApps CMS Cross-site Scripting
Alta
CVE-2017-1000477
XXE Vulnerability in XMLBundle 0.1.7
Media
CVE-2017-1000431
eZ Publish Cross-site Scripting (XSS) vulnerability
Alta
CVE-2011-4138
The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for t
Alta
CVE-2011-4139
Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a cr
Crítica
CVE-2012-0805
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select
Media
CVE-2017-1000481
Products.CMFPlone Open Redirect Vulnerability
Media
CVE-2017-15374
Shopware XSS Vulnerability
Media
CVE-2014-3607
Improper Certificate Validation in vt-ldap
Alta
CVE-2017-11879
Open redirect in ASP.NET Core
Alta
CVE-2017-12622
Apache Geode gfsh authorization vulnerability
Media
CVE-2017-9796
Apache Geode OQL bind parameter vulnerability
Media
CVE-2018-5301
Magento Cross-Site Request Forgery (CSRF)
Media
CVE-2017-15717
Cross-site Scripting in Apache Sling XSS Protection API
Crítica
CVE-2017-1000480
Smarty PHP code injection
Alta
CVE-2012-3353
Apache Sling JCR ContentLoader XmlReader Arbitrary File Load
Alta
CVE-2017-3158
Apache Guacamole Race Condition vulnerability
Media
CVE-2018-1044
Moodle Privilege escalation in quiz web services
Media
CVE-2018-1045
Moodle XSS Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.