Media
CVE-2012-5368
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.686
Baja
CVE-2012-5339
phpMyAdmin multiple cross-site scripting vulnerabilities
Media
CVE-2012-4418
Apache Axis2 Vulnerable to XML Signature wrapping attack
Media
CVE-2011-4314
OpenID4Java does not verify that Attribute Exchange (AX) information is signed
Media
CVE-2012-6531
Zend Framework XEE Vulnerability
Media
CVE-2012-4446
Improper Authentication in Apache Qpid
Media
CVE-2012-0878
Paste Script has improper group memberships permissions
Baja
CVE-2012-4345
phpMyAdmin Multiple Cross-site Scripting Vulnerabilities in the Database Structure page
Crítica
CVE-2012-3442
The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which
Alta
CVE-2012-3443
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a
Alta
CVE-2012-3444
The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows rem
Media
CVE-2012-4404
security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users w
Media
CVE-2012-5657
Zend Framework XXE Vulnerability
Media
CVE-2012-6532
Zend Framework XEE Vulnerability
Alta
CVE-2012-4520
The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host
Alta
CVE-2013-1842
TYPO3 SQL injection vulnerability in the Extbase Framework
Media
CVE-2013-1843
TYPO3 Open redirect vulnerability in the Access tracking mechanism
Media
CVE-2013-1814
Apache Rave information disclosure vulnerability
Media
CVE-2013-4729
phpMyAdmin Global variables scope injection vulnerability
Media
CVE-2013-3300
Lift Sensitive Information Disclosure
Alta
CVE-2012-4399
CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references
Media
CVE-2013-4997
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities
Baja
CVE-2013-4600
Alkacon OpenCMS XSS via title and requestedResource parameters
Alta
CVE-2010-3313
EGroupware Code Injection vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.