Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.861
Restablecer filtrosZope Command Execution Vulnerability
OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors
Plone XSS Vulnerability
Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable
OpenStack Neutron Improper Authentication vulnerability
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
OpenStack Swift allows authenticated users to cause a denial of service
SOAPpy vulnerable to XML External Entity attacks
Review Board Cross-site scripting (XSS) vulnerability in the reviews dropdown
OpenStack Nova uses insecure keystone middleware tmpdir by default
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack
OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image
OpenStack Identity Keystone Privilege Escalation vulnerability
SOAPpy vulnerable to XXE attacks
OpenStack Compute Nova Improper Access Control
OpenStack Nova Router metadata queries are not restricted by tenant
OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability
OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service
OpenStack Neutron Intended MAC-spoofing protection mechanism bypass
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
OpenStack Swift Cross-site Scriping vulnerability
OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests
OpenStack Image Service (Glance) vulnerable to Improper Access Control
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.