Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.728
Silverstripe CMS Arbitrary Code Execution
Unescaped parameters in the PostgreSQL JDBC driver
ImpressPages CMS eval injection vulnerability
phpMyAdmin Vulnerable to Cross-Site Scripting
Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of
phpMyAdmin vulnerable to Cross-site Scripting
Improper Access Control in JBoss mod_cluster
dotCMS allows remote authenticated users to execute arbitrary Java code
Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.
Improper Control of Generation of Code in Spring Security
Symfony Access Control Vulnerability
Exposure of Sensitive Information to an Unauthorized Actor in Spring Security
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary fil
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users wi
Symfony Allows URI Restrictions Bypass Via Double-Encoded String
Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link.
User confusion in IronJacamar
phpMyAdmin Unsafe Fetching of Javascript Code
phpMyAdmin multiple cross-site scripting vulnerabilities
Apache Axis2 Vulnerable to XML Signature wrapping attack
OpenID4Java does not verify that Attribute Exchange (AX) information is signed
Zend Framework XEE Vulnerability
Improper Authentication in Apache Qpid
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.