Media
CVE-2017-6928
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
Crítica
CVE-2017-6925
Drupal Entity access bypass for entities that do not have UUIDs or have protected revisions
Alta
CVE-2017-6381
Drupal Remote code execution
Media
CVE-2017-6370
TYPO3 Information Disclosure Vulnerability
Alta
CVE-2017-6377
Drupal editor module incorrectly checks access to inline private files
Alta
CVE-2017-5936
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions
Alta
CVE-2017-5664
Improper Handling of Exceptional Conditions in Apache Tomcat
Crítica
CVE-2017-5651
Expected Behavior Violation in Apache Tomcat
Alta
CVE-2017-5650
Improper Resource Shutdown or Release in Apache Tomcat
Alta
CVE-2017-5635
Improper Authentication In Apache NiFi
Alta
CVE-2017-5200
Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.
Media
CVE-2017-4971
Insecure Default Initialization of Resource in Pivotal Spring Web Flow
Baja
CVE-2017-3589
Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java
Media
CVE-2017-3586
Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java
Alta
CVE-2017-3523
Improper Access Control in MySQL Connectors Java
Crítica
CVE-2017-18264
phpMyAdmin Improper Privilege Management
Media
CVE-2017-16759
LibreNMS Arbitrary File Read
Media
CVE-2017-16653
Symfony CSRF Vulnerability
Crítica
CVE-2017-16228
Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-
Alta
CVE-2017-15914
Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.
Alta
CVE-2017-15055
TeamPass Improper Privilege Management
Media
CVE-2017-15053
TeamPass Improper Privilege Management
Media
CVE-2017-15052
TeamPass Improper Privilege Management
Alta
CVE-2017-14763
GeniXCMS arbitrary PHP code execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.