Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 310
Restablecer filtrosQualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability
Qualys Jenkins Plugin for Policy Compliance Cross-site Scripting vulnerability
Qualys Jenkins Plugin for WAS XML External Entity vulnerability
XWiki Remote Code Execution Vulnerability via User Registration
WSO2 Registry Stored Cross Site Scripting (XSS) vulnerability
Alkacon OpenCMS XSS via Mercury template
SaToken privilege escalation vulnerability
Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module
Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget
Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu
Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components
Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page
Jetty accepts "+" prefixed value in Content-Length
SSRF vulnerability in Jenkins Bitbucket Push and Pull Request Plugin allows capturing credentials
XWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayer
OpenNMS vulnerable to Cross-site Scripting
Aerospike Java Client vulnerable to unsafe deserialization of server responses
org.xwiki.platform:xwiki-platform-skin-ui Eval Injection vulnerability
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page
XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.