Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 58
Restablecer filtrosCsla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
ImageMagick BlobStream Forward-Seek Under-Allocation
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
imagemagick: integer overflows in MNG magnification
imagemagick: heap-buffer overflow read in MNG magnification with alpha
Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs
DoS Vulnerability in TraceContextPropagator.Extract - OpenTelemetry.Api
OpenTelemetry .NET has Denial of Service (DoS) Vulnerability in API Package
AspNetCore Remote Authenticator for CIE3.0 Allows SAML Response Signature Verification Bypass
The AspNetCore Remote Authenticator for SPID Allows SAML Response Signature Verification Bypass
DotNetZip Directory Traversal vulnerability
Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore
Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib
Path Traversal in SharpZipLib
Cross-site scripting vulnerability in TinyMCE plugins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.