Alta
CVE-2016-1181
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.686
Crítica
CVE-2015-7501
Deserialization of Untrusted Data in Apache commons collections
Alta
CVE-2016-1182
Improper Input Validation in Apache Struts
Crítica
CVE-2016-6814
Deserialization of Untrusted Data in Groovy
Crítica
CVE-2016-5019
Apache MyFaces Trinidad Deserialization Vulnerability
Media
CVE-2017-12610
Improper Authentication in Apache Kafka
Media
CVE-2019-1003083
Missing permission check in Jenkins Gearman Plugin
Media
CVE-2019-1003079
Missing permission check in Jenkins VMware Lab Manager Slaves Plugin
Media
CVE-2019-1003091
Missing permission check in Jenkins SOASTA CloudTest Plugin
Media
CVE-2019-1003081
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Media
CVE-2019-1003087
Missing permission check in Jenkins sinatra-chef-builder Plugin
Media
CVE-2019-1003093
Jenkins Nomad Plugin missing permission check
Media
CVE-2019-1003097
Jenkins Crowd Integration Plugin stores credentials in plain text
Media
CVE-2019-1003099
Jenkins openid Plugin missing permission check
Media
CVE-2019-1003085
Jenkins Zephyr Enterprise Test Management Plugin missing permission check
Media
CVE-2019-1003096
Jenkins TestFairy Plugin stores credentials in plain text
Crítica
CVE-2017-5648
Exposure of Resource to Wrong Sphere in Apache Tomcat
Media
CVE-2011-1571
Liferay Portal vulnerable to arbitrary command injection
Crítica
CVE-2013-4366
Hostname verification in Apache HttpClient 4.3 was disabled by default
Crítica
CVE-2017-17458
In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repo
Crítica
CVE-2018-13347
mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.
Alta
CVE-2018-13346
The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.
Alta
CVE-2018-13348
The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actua
Crítica
CVE-2018-1000132
Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via n
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.