Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Zend-Feed URL Rewrite vulnerability
Zendframework potential Cross-site Scripting vector in `Zend_Service_ReCaptcha_MailHide`
Zend-Form vulnerable to Cross-site Scripting
Zendframework Potential XSS or HTML Injection vector in Zend_Json
Zend-HTTP URL Rewrite vulnerability
ZendFramework1 Potential Security Issues in Bundled Dojo Library
Zend-JSON vulnerable to XXE/XEE attacks
Zendframework Local file disclosure via XXE injection in Zend_XmlRpc
Zendframework Denial of Service vector via XEE injection
ZendFramework Cross-site Scripting vector in `Zend_Filter_StripTags`
An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of ebookmeta before v1.2.8 allows attackers to access sensitive information or cause a Denial of Service (DoS) via cra
Zend-Session session validation vulnerability
ZendFramework Potential Cross-site Scripting in Development Environment Error View Script
Zend-Mail remote code execution in zend-mail via Sendmail adapter
ZendFramework potential XML eXternal Entity injection vectors
ZendFramework potential XML eXternal Entity injection vectors
ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings
ZendFramework potential SQL Injection Vector When Using PDO_MySql
ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`
ZendFramework vulnerable to XXE/XEE attacks
ZendFramework local file inclusion vector in `Zend_View::setScriptPath()` and `render()`
ZendFramework has potential Cross-site Scripting vector in multiple view helpers
Zendframework URL Rewrite vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.