Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.016
Restablecer filtrosdtale vulnerable to Remote Code Execution through the Custom Filter Input
Fides Information Disclosure Vulnerability in Config API Endpoint
Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload
Fides JavaScript Injection Vulnerability in Privacy Center URL
opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
pgAdmin failed to properly control the server code
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
Remote Code Execution in Custom Integration Upload
Airflow Sqoop Provider RCE Vulnerability
Excessive Iteration in gRPC
Apache Airflow Spark Provider Improper Input Validation vulnerability
ScanCode.io command injection in docker image fetch process
Fides Webserver Vulnerable to SVG Bomb File Uploads
Fides Webserver Vulnerable to Zip Bomb File Uploads
Keylime's registrar vulnerable to Denial-of-service attack via a single open connection
yt-dlp File Downloader cookie leak
gRPC connection termination issue
Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox
kiwitcms vulnerable to stored cross-site scripting via unrestricted file upload
Apache Airflow JDBC Provider Improper Input Validation vulnerability
configobj ReDoS exploitable by developer using values in a server-side configuration file
Kiwi TCMS Stored Cross-site Scripting via SVG file
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.