Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 546
Restablecer filtrosRemote code execution in Apache Flume
Neo4j Graph apoc plugins Partial Path Traversal Vulnerability
DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import
JSPUI vulnerable to path traversal in submission (resumable) upload
JSPUI's controlled vocabulary feature vulnerable to Open Redirect before v6.4 and v5.11
JSPUI Possible Cross Site Scripting in "Request a Copy" Feature
JSPUI spellcheck and autocomplete tools vulnerable to Cross Site Scripting
XMLUI's metadata of withdrawn Items is exposed to anonymous users
JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization
Apache Hadoop argument injection vulnerability
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
Partial Path Traversal in com.amazonaws:aws-java-sdk-s3
Jetty SslConnection does not release pooled ByteBuffers in case of errors
Code injection in Apache Commons Configuration
Remote Code Execution in Apache Flume
Improper Certificate Validation in Apache Netbeans
Exposure of Resource to Wrong Sphere in Liferay Portal
Play Framework Inadequate Encryption Strength vulnerability
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.