Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.070
Restablecer filtrosZendFramework potential Cross-site Scripting vectors due to inconsistent encodings
ZendFramework potential SQL Injection Vector When Using PDO_MySql
ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`
ZendFramework vulnerable to XXE/XEE attacks
ZendFramework local file inclusion vector in `Zend_View::setScriptPath()` and `render()`
ZendFramework has potential Cross-site Scripting vector in multiple view helpers
Zendframework URL Rewrite vulnerability
ZendFramework vulnerable to Cross-site Scripting
ZendFramework potential remote code execution in zend-mail via Sendmail adapter
ZendFramework Potential Proxy Injection Vulnerabilities
ZendFramework Information Disclosure and Insufficient Entropy vulnerability
ZendFramework SQL injection due to execution of platform-specific SQL containing interpolations
Zendframework vulnerable to XXE/XEE attacks
ZendFramework Potential Information Disclosure and Insufficient Entropy vulnerabilities
Zendframework session validation vulnerability
ZendFramework Route Parameter Injection Via Query String in `Zend\Mvc`
Zendframework has potential Cross-site Scripting vector in multiple view helpers
Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`
TYPO3 Denial of Service in Online Media Asset Handling
TYPO3 Information Disclosure in Install Tool
TYPO3 Security Misconfiguration in Install Tool Cookie
TYPO3 Cross-Site Scripting in Frontend User Login
TYPO3 Cross-Site Scripting in Backend Modal Component
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.