Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts
Directory traversal in Mort Bay Jetty
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action
Apache Tiles Vulnerable to XSS via EL Expression Injection
Frontend User Registration extension for TYPO3 does not properly verify access rights
Spring Framework Inefficient Regular Expression Complexity
phpMyAdmin HTTP Response Splitting Vulnerability
Typo3 Backend XSS Vulnerability
TYPO3 leaks a hash secret in an error message
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Cross-site scripting in Apache Tomcat
Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network
Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code
Exposure of Sensitive Information in Apache Tomcat
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
Authentication library in TYPO3 vulnerable to session fixation
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
Apache Geronimo Application Server CSRF vulnerabilities
Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities
Apache Tomcat Denial of Service via Malformed Request Headers
Apache Jackrabbit contains Cross-site Scripting
AdaptCMS SQL Injection vulnerability
Apache Tomcat information disclosure vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.