Media
ghsa-3m2r-q8x3-xmf7
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Alta
CVE-2018-0786
Improper Certificate Validation in Microsoft .NET Framework components
Media
CVE-2017-0248
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core
Media
CVE-2018-7559
OPC UA applications can allow a remote attacker to determine a Server's private key
Alta
CVE-2018-8269
Denial of service in ASP.NET Core
Alta
CVE-2017-0247
ASP.NET Core fails to properly validate web requests
Media
CVE-2017-0256
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc
Alta
CVE-2017-0249
High severity vulnerability that affects Microsoft.AspNetCore.Mvc
Alta
CVE-2018-0787
ASP.NET Core allow an elevation of privilege
Alta
CVE-2018-8171
Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated
Alta
CVE-2018-8409
Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests
Alta
CVE-2018-0765
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
Alta
CVE-2018-12086
High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
Media
CVE-2018-12087
Moderate severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
Alta
CVE-2018-8030
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
Media
CVE-2016-2166
Moderate severity vulnerability that affects org.apache.qpid:proton-j
Media
CVE-2016-3094
Improper Input Validation in org.apache.qpid:qpid-broker
Crítica
CVE-2016-4432
AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication
Media
CVE-2015-5241
Moderate severity vulnerability that affects org.apache.juddi:juddi-client
Alta
Explotada en ataques
CVE-2017-9805
REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering
Alta
CVE-2017-9804
Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used
Alta
CVE-2017-9793
The REST Plugin in Apache Struts is using an outdated XStream library
Alta
CVE-2017-9787
Spring AOP functionality (Struts) vulnerable to DoS attack
Media
CVE-2017-7672
Apache Struts Improper Input Validation vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.