Alta
CVE-2013-1842
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2013-1843
TYPO3 Open redirect vulnerability in the Access tracking mechanism
Media
CVE-2013-1814
Apache Rave information disclosure vulnerability
Media
CVE-2013-4729
phpMyAdmin Global variables scope injection vulnerability
Media
CVE-2013-3300
Lift Sensitive Information Disclosure
Alta
CVE-2012-4399
CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references
Media
CVE-2013-4997
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities
Baja
CVE-2013-4600
Alkacon OpenCMS XSS via title and requestedResource parameters
Alta
CVE-2010-3313
EGroupware Code Injection vulnerability
Media
CVE-2013-4766
Eucalyptus Unauthorized Access to CC/NC Log Files
Alta
CVE-2013-1630
pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary co
Crítica
CVE-2013-5942
Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) sto
Crítica
CVE-2013-5093
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a c
Media
CVE-2013-4378
Improper Neutralization of Input During Web Page Generation in JavaMelody
Media
CVE-2011-1411
Improper Authentication in OpenSAML
Alta
CVE-2013-1633
easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to ex
Alta
CVE-2013-4682
Multishop extension for TYPO3 has SQL Injection vulnerability
Media
CVE-2013-5750
FriendsOfSymfony FOSUserBundle denial of service via login form
Media
CVE-2011-2731
Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security
Media
CVE-2013-4295
Apache Shindig PHP Sensitive Information Disclosure
Media
CVE-2013-4390
Apache Sling Auth Core bundle vulnerable to Open Redirection
Alta
CVE-2013-1445
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for co
Media
CVE-2011-5036
Rack Gem Subject to Denial of Service via Hash Collisions
Media
CVE-2013-6289
Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.