Media
CVE-2012-0878
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.728
Baja
CVE-2012-4345
phpMyAdmin Multiple Cross-site Scripting Vulnerabilities in the Database Structure page
Crítica
CVE-2012-3442
The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which
Alta
CVE-2012-3443
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a
Alta
CVE-2012-3444
The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows rem
Media
CVE-2012-4404
security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users w
Media
CVE-2012-5657
Zend Framework XXE Vulnerability
Media
CVE-2012-6532
Zend Framework XEE Vulnerability
Alta
CVE-2012-4520
The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host
Alta
CVE-2013-1842
TYPO3 SQL injection vulnerability in the Extbase Framework
Media
CVE-2013-1843
TYPO3 Open redirect vulnerability in the Access tracking mechanism
Media
CVE-2013-1814
Apache Rave information disclosure vulnerability
Media
CVE-2013-4729
phpMyAdmin Global variables scope injection vulnerability
Media
CVE-2013-3300
Lift Sensitive Information Disclosure
Alta
CVE-2012-4399
CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references
Media
CVE-2013-4997
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities
Baja
CVE-2013-4600
Alkacon OpenCMS XSS via title and requestedResource parameters
Alta
CVE-2010-3313
EGroupware Code Injection vulnerability
Media
CVE-2013-4766
Eucalyptus Unauthorized Access to CC/NC Log Files
Alta
CVE-2013-1630
pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary co
Crítica
CVE-2013-5942
Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) sto
Crítica
CVE-2013-5093
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a c
Media
CVE-2013-4378
Improper Neutralization of Input During Web Page Generation in JavaMelody
Media
CVE-2011-1411
Improper Authentication in OpenSAML
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.