Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Apache Tomcat Improper Access Control vulnerability
Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow
Moodle Users could elevate their role when accessing the LTI tool on a provider site
Moodle XSS Vulnerability
Code injection in Apache Struts
Sandbox bypass in Jenkins Pipeline: Groovy Plugin
Server side object manipulation in Apache Struts
Improper Access Control in Elasticsearch
Improper Restriction of XML External Entity Reference in Apace Derby
Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability
Improper Input Validation in BeanShell
Deserialization of Untrusted Data in Apache Batik
Improper Restriction of XML External Entity Reference in iText
Improper Restriction of XML External Entity Reference in Apache Batik
Improper Restriction of Recursive Entity References in DTDs in Apache POI
Observable Discrepancy in BouncyCastle
A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.
Moodle XSS Vulnerability
Symphony CMS XSS Vulnerabilities
Silverstripe CMS XSS Vulnerability
Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members
Moodle allows remote authenticated users to cause a denial of service (invalid database records)
Moodle allows remote authenticated users to cause a denial of service (invalid database records)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.