Media
CVE-2014-0075
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.737
Media
CVE-2014-0099
Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat
Media
CVE-2014-0119
Missing XML Validation in Apache Tomcat
Media
CVE-2014-0096
Improper Input Validation in Apache Tomcat
Media
CVE-2014-0227
Improper Input Validation in Apache Tomcat
Alta
CVE-2014-0230
Uncontrolled Resource Consumption in Apache Tomcat
Media
CVE-2014-7810
Improper Access Control in Apache Tomcat
Media
CVE-2016-0706
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Alta
CVE-2016-0714
Improper Access Control in Apache Tomcat
Alta
CVE-2016-8745
Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat
Media
CVE-2015-5345
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Media
CVE-2015-5174
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Alta
CVE-2016-6817
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
Alta
CVE-2017-5647
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Alta
CVE-2017-12616
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Alta
CVE-2016-8747
Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request
Media
CVE-2017-15706
Inconsistent documentation in Apache Tomcat
Media
CVE-2017-7674
Insufficient Verification of Data Authenticity in Apache Tomcat
Media
CVE-2018-1999027
Jenkins SaltStack Plugin allows attackers to capture credentials with a known credentials ID stored in Jenkins
Media
CVE-2018-1000191
Jenkins Black Duck Detect Plugin information exposure vulnerability
Alta
CVE-2017-5657
Apache Archiva vulnerable to Cross Site Request Forgery
Media
CVE-2016-5005
Apache Archiva vulnerable to Cross-site Scripting
Media
CVE-2011-4969
jQuery vulnerable to Cross-Site Scripting (XSS)
Alta
CVE-2018-14522
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit in pitch/pitch.c, as demonstrated by aubionotes.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.