Crítica
CVE-2019-8149
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Alta
CVE-2019-8154
Magento remote code execution vulnerability
Alta
CVE-2019-17221
PhantomJS Arbitrary File Read
Media
CVE-2019-16904
TeamPass Cross-site Scripting (XSS) vulnerability
Media
CVE-2019-10430
Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text
Media
CVE-2019-10426
Jenkins Gem Publisher Plugin stores credentials as plaintext
Alta
CVE-2019-10428
Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form
Media
CVE-2019-10407
Project Inheritance Plugin showed secret environment variables defined in Mask Passwords Plugin
Media
CVE-2019-10427
Jenkins Aqua MicroScanner Plugin showed plain text credential in configuration form
Media
CVE-2019-10429
Jenkins GitLab Logo Plugin stores credentials unencrypted
Media
CVE-2019-10406
Improper Neutralization of Input During Web Page Generation in Jenkins
Media
CVE-2019-10405
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Media
CVE-2019-10404
Improper Neutralization of Input During Web Page Generation in Jenkins
Media
CVE-2019-10402
Improper Neutralization of Input During Web Page Generation in Jenkins
Media
CVE-2019-10401
Improper Neutralization of Input During Web Page Generation in Jenkins
Media
CVE-2019-10403
Improper Neutralization of Input During Web Page Generation in Jenkins
Crítica
CVE-2019-7139
Magento 2 Community Edition SQLi Vulnerability
Crítica
CVE-2019-0195
Deserialization of Untrusted Data in Apache Tapestry
Media
CVE-2019-12922
phpMyAdmin Cross-Site Request Forgery (CSRF)
Media
CVE-2019-1302
Elevation of privilege in ASP.NET Core
Crítica
CVE-2019-16227
An issue was discovered in py-lmdb 0.97. For certain values of mn_flags, mdb_cursor_set triggers a memcpy with an invalid write operation within mdb_xcursor_init1. NOTE: this outcome occurs when acces
Alta
CVE-2019-12401
Apache Solr vulnerable to XML Bomb
Media
CVE-2019-15484
Bolt Cross-site Scripting (XSS) via an image's alt or title field
Media
CVE-2019-15489
laracom Cross-site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.