Niska
CVE-2012-6074
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 647
Niska
CVE-2012-6073
Jenkins affected by Open Redirect Vulnerability
Średnia
CVE-2012-6072
Jenkins allows HTTP Injection and Response Splitting
Wysoka
CVE-2016-1866
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data
Wysoka
CVE-2013-4111
The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in th
Wysoka
CVE-2013-2191
python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof Bugzilla servers via a crafted certificate.
Średnia
CVE-2014-6300
phpMyAdmin micro history Implementation XSS Vulnerability
Wysoka
CVE-2014-3730
The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduc
Średnia
CVE-2014-0482
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.Re
Wysoka
CVE-2014-0480
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attacker
Średnia
CVE-2014-0483
The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship bet
Wysoka
CVE-2016-5739
phpMyAdmin vulnerable to Cross-Site Request Forgery
Średnia
CVE-2016-5733
phpMyAdmin vulnerable to Cross-site Scripting
Średnia
CVE-2016-5705
phpMyAdmin vulnerable to Cross-site Scripting
Średnia
CVE-2016-5701
phpMyAdmin vulnerable to Cross-site Scripting
Średnia
CVE-2016-5731
phpMyAdmin Cross-site scripting (XSS) vulnerability
Średnia
CVE-2016-5730
phpMyAdmin full path disclosure vulnerability
Wysoka
CVE-2016-5706
phpMyAdmin Denial Of Service (DOS) attack
Wysoka
CVE-2016-3630
The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b)
Wysoka
CVE-2016-3069
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.
Wysoka
CVE-2016-3068
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
Wysoka
CVE-2016-2041
phpMyAdmin Unsafe comparison of XSRF/CSRF token
Średnia
CVE-2016-2040
phpMyAdmin XSS Vulnerability
Wysoka
CVE-2015-2316
The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of servic
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.