Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.358
Restablecer filtrosOpenStack Nova Potential Xen connection password leak via StorageError
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information
OpenStack Oslo utility sensitive information exposure via log files
web2py exposure of sensitive information
In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless o
Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because the
Openstack Aodh can be used to launder Keystone trusts
OpenStack Keystone Logs Passwords
OpenStack Identity Keystone Improper Privilege Management
OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege
OpenStack Keystone allows context-dependent attackers to bypass access restrictions
OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
Plone credentials stored in session cookie
Plone Improper Session Management
Plone CMS Improper Session Management
MoinMoin Improper ACL handling for calendars and includes
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Plone allows remote users to modify arbitrary portraits
Django Improper Access Control
OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor
MoinMoin Improper Privilege Management
MoinMoin Improper Access Control
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.