Media
CVE-2015-3154
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Alta
CVE-2020-7596
Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov
Alta
CVE-2020-7938
Plone Privilege Escallation
Media
CVE-2020-7936
An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirec
Media
CVE-2020-7937
An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site.
Alta
CVE-2020-7939
SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)
Alta
CVE-2020-7940
Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.
Media
CVE-2020-7210
Umbraco CMS vulnerable to CSRF
Alta
CVE-2019-14888
Undertow vulnerable to Uncontrolled Resource Consumption
Crítica
CVE-2019-17361
In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint
Media
CVE-2020-5502
phpBB allows CSRF
Media
CVE-2020-5501
phpBB Cross-Site Request Forgery (CSRF)
Alta
CVE-2020-2092
XXE vulnerability in Jenkins Robot Framework Plugin
Media
CVE-2020-2095
Redgate SQL Change Automation Plugin stored credentials in plain text
Media
CVE-2020-2094
Missing permission checks in Health Advisor by CloudBees Plugin
Alta
CVE-2020-2098
CSRF vulnerability in Jenkins Sounds Plugin allow OS command execution
Alta
CVE-2020-2097
Missing permission checks in Jenkins Sounds Plugin allow OS command execution
Media
CVE-2020-2096
Reflected XSS vulnerability in Jenkins gitlab-hook Plugin
Media
CVE-2020-2091
Missing permission checks in Jenkins Amazon EC2 Plugin
Media
CVE-2020-2093
CSRF vulnerability in Health Advisor by CloudBees Plugin
Baja
CVE-2020-2090
CSRF vulnerability in Jenkins Amazon EC2 Plugin
Media
CVE-2020-0602
Denial of service in ASP.NET Core
Alta
CVE-2020-0603
Remote code execution in ASP.NET Core
Alta
CVE-2020-0606
Remote code execution in Microsoft.WindowsDesktop.App.Ref
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.