Alta
CVE-2012-4571
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2011-2732
Improper Control of Generation of Code in Spring Security
Media
CVE-2012-6432
Symfony Access Control Vulnerability
Media
CVE-2012-5055
Exposure of Sensitive Information to an Unauthorized Actor in Spring Security
Media
CVE-2012-6080
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary fil
Media
CVE-2012-6495
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users wi
Media
CVE-2012-6431
Symfony Allows URI Restrictions Bypass Via Double-Encoded String
Media
CVE-2012-6082
Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link.
Media
CVE-2012-3428
User confusion in IronJacamar
Media
CVE-2012-5368
phpMyAdmin Unsafe Fetching of Javascript Code
Baja
CVE-2012-5339
phpMyAdmin multiple cross-site scripting vulnerabilities
Media
CVE-2012-4418
Apache Axis2 Vulnerable to XML Signature wrapping attack
Media
CVE-2011-4314
OpenID4Java does not verify that Attribute Exchange (AX) information is signed
Media
CVE-2012-6531
Zend Framework XEE Vulnerability
Media
CVE-2012-4446
Improper Authentication in Apache Qpid
Media
CVE-2012-0878
Paste Script has improper group memberships permissions
Baja
CVE-2012-4345
phpMyAdmin Multiple Cross-site Scripting Vulnerabilities in the Database Structure page
Crítica
CVE-2012-3442
The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which
Alta
CVE-2012-3443
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a
Alta
CVE-2012-3444
The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows rem
Media
CVE-2012-4404
security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users w
Media
CVE-2012-5657
Zend Framework XXE Vulnerability
Media
CVE-2012-6532
Zend Framework XEE Vulnerability
Alta
CVE-2012-4520
The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.