Media
CVE-2017-1000015
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.737
Media
CVE-2014-3558
Improper Authentication in Hibernate Validator
Alta
CVE-2014-3490
Incorrect Privilege Assignment in RESTEasy
Media
CVE-2014-0111
Apache Syncope JEXL Code Injection
Media
CVE-2016-0763
Improper Verification of Source of a Communication Channel in Apache Tomcat
Alta
CVE-2019-6970
Moodle SSRF Vulnerability
Media
CVE-2018-14486
DNN XSS Vulnerability
Media
CVE-2008-5515
Directory Traversal in Apache Tomcat
Media
CVE-2010-2227
Apache Tomcat does not properly handle an invalid Transfer-Encoding header
Media
CVE-2011-5063
Improper Authentication in Apache Tomcat
Media
CVE-2011-5062
Improper Authentication in Apache Tomcat
Media
CVE-2011-2526
Improper Input Validation in Apache Tomcat
Media
CVE-2011-2204
Insertion of Sensitive Information into Log File in Apache Tomcat
Media
CVE-2011-5064
Use of Hard-coded Cryptographic Key in Apache Tomcat
Alta
CVE-2011-3190
Apache Tomcat Allows Remote Attackers to Spoof AJP Requests
Media
CVE-2011-1184
Authentication Bypass in Apache Tomcat
Baja
CVE-2010-3718
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Alta
CVE-2017-1000017
phpMyAdmin SSRF in replication
Crítica
CVE-2019-7537
An issue was discovered in Donfig 0.3.0. There is a vulnerability in the collect_yaml method in config_obj.py. It can execute arbitrary Python commands, resulting in command execution.
Media
CVE-2016-10744
Improper Neutralization of Input During Web Page Generation in Select2
Media
CVE-2019-10118
Snipe-IT XSS Vulnerability
Media
CVE-2014-1904
Improper Neutralization of Input During Web Page Generation in Spring Framework
Alta
CVE-2014-3612
Improper Authentication in Apache WSS4J
Media
CVE-2014-8110
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.