Sin evaluar
603
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Sin evaluar
CVE-2018-1000126
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file. Th
Alta
CVE-2018-1000096
tiny-json-http missing SSL certificate validation
Alta
CVE-2018-1000086
pym.js CSRF Vulnerability
Crítica
CVE-2018-7750
Paramiko not properly checking authentication before processing other requests
Sin evaluar
CVE-2018-1000083
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via
Sin evaluar
CVE-2018-1000082
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server
Sin evaluar
CVE-2018-1000081
Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing. This attack appear to be exploitable via An attacker can
Sin evaluar
CVE-2018-1000080
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user. This attack appear to be exploitable v
Crítica
CVE-2018-1000089
django-anymail Includes Sensitive Information in Log Files
Sin evaluar
602
Attachments - SQL Injection
Crítica
CVE-2018-20987
Newsletters <= 4.6.8.5 - Object Injection
Alta
CVE-2018-21006
bbPress Move Topics <= 1.1.4 - Cross-Site Request Forgery
Alta
CVE-2018-21005
bbPress Move Topics <= 1.1.4 - PHP Object Injection
Baja
CVE-2018-7537
Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters
Media
CVE-2018-7536
Django denial-of-service possibility in urlize and urlizetrunc template filters
Sin evaluar
CVE-2018-0525
Directory traversal vulnerability in Jubatus 1.0.2 and earlier allows remote attackers to read arbitrary files via unspecified vectors.
Sin evaluar
CVE-2018-0524
Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors.
Sin evaluar
CVE-2018-6368
JomEstate - SQL Injection
Media
CVE-2018-0547
WP All Import <= 3.4.6 - Cross-Site Scripting
Media
CVE-2018-0546
WP All Import <= 3.4.5 - Cross-Site Scripting
Media
CVE-2018-8729
Activity Log <= 2.4.0 - Multiple Cross-Site Scripting
Sin evaluar
CVE-2018-6373
Fastball - SQL Injection
Sin evaluar
CVE-2018-6584
DT Register - SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.