Alta
CVE-2013-3239
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.737
Alta
CVE-2013-4510
Tryton Directory Traversal vulnerability
Media
CVE-2013-6348
Apache Struts is vulnerable to Cross-site Scripting
Media
CVE-2013-1865
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions
Alta
CVE-2012-3363
Zend Framework XXE Vulnerability
Alta
CVE-2013-4314
The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle at
Alta
CVE-2013-4315
Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_R
Media
CVE-2012-1589
Drupal Open Redirect
Media
CVE-2012-2153
Drupal improper access restrictions
Media
CVE-2012-6081
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated use
Media
CVE-2013-5676
Jenkins SonarQube Plugin Stores Passwords in Cleartext
Alta
CVE-2013-6389
Drupal has open redirect vulnerability in the Overlay module
Media
CVE-2013-7075
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component
Media
CVE-2013-7081
TYPO3 Improper Access Control vulnerability
Media
CVE-2013-7080
TYPO3 is vulnerable to Mass Assignment in the Extension table administration library
Alta
CVE-2013-2104
python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it
Media
CVE-2014-0808
EC-CUBE vulnerable to authorization bypass
Alta
CVE-2013-1443
The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption)
Alta
CVE-2014-1202
Code injection via property expansion in SoapUI
Crítica
CVE-2013-6396
The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and
Media
CVE-2013-4662
CiviCRM SQL injection vulnerability via Quick Search API
Media
CVE-2013-4112
Exposure of Sensitive Information to an Unauthorized Actor in JGroup
Alta
CVE-2012-6612
Improper Restriction of XML External Entity Reference in Apache Solr
Alta
CVE-2014-0006
The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.