Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.
Information Exposure vulnerability in Eclipse Jetty
Installation information leak in Eclipse Jetty
Cross-site Scripting in Eclipse Jetty
Billion laughs attack in c3p0
WDContactFormBuilder <= 1.0.68 - Cross-Site Request Forgery
Page Builder: KingComposer < 2.8.2 - Authenticated Stored Cross-Site Scripting
Missing Encryption of Sensitive Data in arrow-kt Arrow
Improper Input Validation in python-dbusmock
WP Database Backup <= 5.1.1 - Cross-Site Scripting
kunena - XSS (Cross Site Scripting)
Improper Certificate Validation in urllib3
Critical severity vulnerability that affects Auth0-WCF-Service-JWT
Server-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo
Apache Tomcat OS Command Injection vulnerability
CarSpot – Dealership Wordpress Classified Theme < 2.1.7 - Authenticated Stored Cross-Site Scripting
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
Drupal core - SA-CORE-2019-005
Python-saml allows manipulation of SAML data without invalidation of cryptographic signature
SupportCandy – Helpdesk & Support Ticket System <= 2.0.0 - Arbitrary File Upload
Spring Security uses insufficiently random values
Option Tree <= 2.6.0 - PHP Object Injection
MailPoet – emails and newsletters in WordPress <= 3.23.1 - Reflected Cross-Site Scripting via URL parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.