Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) <= 3.0.1 - Cross-Site Scripting
Content Mask <= 1.8.4 - Authenticated (Subscriber+) Arbitrary Options Update
WP JS <= 2.0.6 - Reflected Cross-Site Scripting
SQL filter bypass leading to arbitrary write requests using SQL Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
Possible XSS injection through Validate::isCleanHTML method
Arbitrary file read via the backoffice Database Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
WP Subscribe <= 1.2.12 - Authenticated (Admin+) Stored Cross-Site Scripting
Breeze – WordPress Cache Plugin <= 2.0.2 - Unprotected AJAX Actions
Mono ASP.NET View State Cross-Site Scripting (XSS) vulnerability
Cross-site Scripting in in JRuby
Cross-site request forgery in Apache ActiveMQ
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
TYPO3 PHP remote file inclusion vulnerability
Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creatin
The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.
Cross-site scripting in Apache ActiveMQ
Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser l
MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.
MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain se
TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
Smarty Does Not Consider Umask Values When Setting Permissions
Commerce extension for TYPO3 vulnerable to Cross-site Scripting
Accessibility Glossary (a21glossary) SQL injection vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.