Media
CVE-2019-1003096
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Crítica
CVE-2017-5648
Exposure of Resource to Wrong Sphere in Apache Tomcat
Media
CVE-2011-1571
Liferay Portal vulnerable to arbitrary command injection
Crítica
CVE-2013-4366
Hostname verification in Apache HttpClient 4.3 was disabled by default
Crítica
CVE-2017-17458
In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repo
Crítica
CVE-2018-13347
mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.
Alta
CVE-2018-13346
The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.
Alta
CVE-2018-13348
The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actua
Crítica
CVE-2018-1000132
Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via n
Alta
CVE-2017-16244
October CMS CSRF
Media
CVE-2017-15284
OctoberCMS Cross-Site Scripting
Alta
CVE-2017-1000119
October CMS PHP Code Execution
Alta
CVE-2018-1999009
October CMS Local File Inclusion
Media
CVE-2018-7198
October CMS - RainLab Blog Plugin XSS
Crítica
CVE-2017-1000194
October CMS File Upload Vulnerability
Media
CVE-2017-1000193
October CMS XSS
Media
CVE-2011-4367
Apache MyFaces Vulnerable to Path Traversal
Crítica
CVE-2017-1000009
Akeneo PIM vulnerable to shell injection in the mass edition
Alta
CVE-2016-5388
Improper Access Control in Apache Tomcat
Alta
CVE-2017-12160
Keycloak Oauth Implementation Error
Crítica
CVE-2018-15751
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).
Media
CVE-2018-15750
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.
Crítica
CVE-2019-9194
elFinder command injection vulnerability in the PHP connector
Crítica
CVE-2019-7743
Joomla! Object Injection Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.