Crítica
CVE-2022-25865
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.728
Alta
CVE-2022-25862
Prototype Pollution in sds
Crítica
CVE-2022-1715
Account takeover in facturascripts
Media
CVE-2022-29433
Donations <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2018-10931
Cobbler has Exposed Dangerous Method or Function
Alta
CVE-2015-6240
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.
Alta
CVE-2015-7529
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sos
Media
CVE-2014-0193
Netty denial of service vulnerability
Crítica
CVE-2018-9160
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
Alta
CVE-2018-8947
Plaintext Storage of Sensitive Information in Laravel Log Viewer before v0.13.0
Media
CVE-2018-8452
ChakraCore information disclosure vulnerability
Media
CVE-2018-8276
ChakraCore Security Bypass
Alta
CVE-2018-8145
ChakraCore information disclosure vulnerability
Media
CVE-2018-8036
Loop with Unreachable Exit Condition in Apache PDFBox
Alta
CVE-2018-8028
Apache Sentry may allow attacker to access/remove data from Sentry protected table
Crítica
CVE-2018-8016
Missing Authentication for Critical Function in Apache Cassandra
Alta
CVE-2018-7644
SimpleSAMLphp Improper Verification of Cryptographic Signature
Alta
CVE-2018-7408
Incorrect Permission Assignment for Critical Resource in NPM
Crítica
CVE-2018-6835
Etherpad Lite Access Restriction Bypass
Crítica
CVE-2018-6521
SimpleSAMLphp Use of insecure connection charset (sqlauth module)
Alta
CVE-2018-3258
Improper Privilege Management in MySQL Connectors Java
Alta
CVE-2018-20465
Craft CMS Vulnerable to Server-Side Template Injection
Media
CVE-2018-1999047
Incorrect Authorization in Jenkins
Alta
CVE-2018-1999040
Exposure of Sensitive Information in Jenkins Kubernetes Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.