Media
CVE-2018-1002202
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
Media
CVE-2018-1002200
Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver
Media
CVE-2018-1002208
Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib
Media
CVE-2018-10894
Keycloak Authentication Error
Media
CVE-2018-10890
Moodle Exposure of Sensitive Information to an Unauthorized Actor
Media
CVE-2018-10889
Moodle sensitive information disclosure
Media
CVE-2018-14636
Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively
Media
CVE-2018-14631
Moodle Cross-site Scripting
Alta
CVE-2018-14630
Moodle XML import of ddwtos could lead to intentional remote code execution
Media
CVE-2018-14658
Keycloak Open Redirect
Media
CVE-2018-14655
Keycloak vulnerable to cross-site scripting via the state parameter
Alta
CVE-2018-15761
Cloud Foundry UAA Privilege Escalation
Alta
CVE-2018-16849
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor ru
Media
CVE-2018-17247
Improper Restriction of XML External Entity Reference in Elasticsearch
Media
CVE-2018-17244
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
Alta
CVE-2018-16854
Moodle Login CSRF vulnerability in login form
Alta
CVE-2018-1051
Deserialization of Untrusted Data in org.jboss.resteasy:resteasy-yaml-provider
Alta
CVE-2018-1082
Moodle Improper Authentication
Media
CVE-2018-1114
Uncontrolled Resource Consumption in Undertow
Alta
CVE-2018-1131
Deserialization of Untrusted Data in Infinispan
Media
CVE-2018-1229
Cross-site Scripting in Pivotal Spring Batch Admin
Alta
CVE-2018-3758
express-cart unrestricted file upload vulnerability
Media
CVE-2018-3771
statics-server Cross-site Scripting vulnerability
Media
CVE-2018-3824
Elasticsearch subject to cross site scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.