Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 647
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service coul
Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the abili
An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated federated user could request permissions to a project and uninten
Cloud Foundry UAA Identity Zone Admin Privilege Escalation
Cloud Foundry vulnerable to Cross-Site Request Forgery
Cloud Foundry UAA password reset vulnerability
Blind SQL Injection with privileged Cloud Foundry UAA endpoints
Cloud Foundry UAA privilege escalation with user invitations
Cloud Foundry UAA Privilege Escalation
Cloud Foundry denial of service vulnerability
Cloud Foundry UAA reset password vulnerable to brute force attack
Apache Directory Studio Command Injection
.NET Core Denial of Service Vulnerability
Uncontrolled Resource Consumption in Apache Commons Compress
Issuer validation regression in Spring Cloud SSO Connector
spring-integration-zip Arbitrary File Write
UAA privilege escalation across identity zones
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Cloud Foundry Runtime Insufficient Session Expiration vulnerability
Cloud Foundry Runtime Cross-Site Request Forgery vulnerability
Pi Cross-site Scripting vulnerability
Rundeck Community Edition vulnerable to Cross-site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.