Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
ThinkPHP SQLi Vulnerability
Apache XML-RPC vulnerable to Deserialization of Untrusted Data
Apache XML-RPC XXE Vulnerability
Jenkins vulnerable to Cross-site Scripting
ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.
SabreDAV Directory Traversal vulnerability
httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X
MantisBT allows XSS via the Manage Filter page
MantisBT allows XSS via Edit Filter page
Apache Struts Code injection due to conversion error
XSS in baserCMS before 4.1.4
Improper Input Validation in Apache Spark
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.
LFI in PHP-Proxy 5.1.0
FineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability
Jenkins Cross-site Scripting vulnerability
Unauthenticated File Read in PHP Proxy
Showdoc Forced Browsing
Showdoc CSRF Vulnerability
XSS in PHP-Proxy-App through v3.0
Asset Pipeline plugin for Grails vulnerable to Path Traversal
Umbraco CMS vulnerable to stored XSS
Flarum Core Leaks PII
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.