Alta
CVE-2013-1633
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.728
Alta
CVE-2013-4682
Multishop extension for TYPO3 has SQL Injection vulnerability
Media
CVE-2013-5750
FriendsOfSymfony FOSUserBundle denial of service via login form
Media
CVE-2011-2731
Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security
Media
CVE-2013-4295
Apache Shindig PHP Sensitive Information Disclosure
Media
CVE-2013-4390
Apache Sling Auth Core bundle vulnerable to Open Redirection
Alta
CVE-2013-1445
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for co
Media
CVE-2011-5036
Rack Gem Subject to Denial of Service via Hash Collisions
Media
CVE-2013-6289
Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS)
Crítica
CVE-2013-6288
Apache Solr for TYPO3 (solr) extension is vulnerable to Insecure Unserialize
Alta
CVE-2013-6617
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.
Media
CVE-2013-4714
Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability
Alta
CVE-2013-4437
Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."
Alta
CVE-2013-4436
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (
Alta
CVE-2013-4435
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another rout
Alta
CVE-2013-3239
phpMyAdmin Remote Code Execution
Alta
CVE-2013-4510
Tryton Directory Traversal vulnerability
Media
CVE-2013-6348
Apache Struts is vulnerable to Cross-site Scripting
Media
CVE-2013-1865
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions
Alta
CVE-2012-3363
Zend Framework XXE Vulnerability
Alta
CVE-2013-4314
The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle at
Alta
CVE-2013-4315
Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_R
Media
CVE-2012-1589
Drupal Open Redirect
Media
CVE-2012-2153
Drupal improper access restrictions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.