Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.801
Restablecer filtrosPlone allows remote attackers to read hidden folder contents
Plone and Zope2 vulnerable to unauthorized access to restricted attributes
HTTP header injection in Plone and Zope2
OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events
OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events
OpenStack Keystone Domain-scoped tokens don't get revoked
python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities
Incorrect Privilege Assignment in Jinja2
OpenStack Nova host data leak to vm instance in rescue mode
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initiali
Pillow Temporary file name leakage
OpenStack Identity (Keystone) DoS through V3 API authentication chaining
OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend
OpenStack Nova VMWare driver leaks rescued images
Creation of Temporary File With Insecure Permissions in logilab-commons
Improper Link Resolution Before File Access in logilab-commons
OpenStack Glance sensitive information disclosure via logs
OpenStack Nova Live migration can leak root disk into ephemeral storage
The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.
Minion identity not validated in saltstack
Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to b
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.