Alta
CVE-2012-5505
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.687
Alta
CVE-2012-5506
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) via an RSS feed request for a folder the user does not have permissio
Crítica
CVE-2012-5495
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to "go_back."
Alta
CVE-2014-6289
yag and pt_extbase extensions for TYPO3 allow remote attackers to bypass access restrictions
Baja
CVE-2014-6296
WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting
Alta
CVE-2014-6295
WEC Map (wec_map) extension for TYPO3 allows SQL Injection
Media
CVE-2014-0168
Cross-Site Request Forgery in Jolokia
Alta
CVE-2012-5485
registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.
Alta
CVE-2012-5488
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject.
Alta
CVE-2012-5499
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (memory consumption) via a large value, related to formatColumns.
Media
CVE-2012-5497
membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL.
Media
CVE-2014-6288
TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism
Alta
CVE-2014-3947
TYPO3 powermail extension has unrestricted file upload vulnerability
Media
CVE-2012-5500
The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a cra
Media
CVE-2012-5508
The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifie
Media
CVE-2014-5326
Improper Neutralization of Input During Web Page Generation in Direct Web Remoting
Media
CVE-2014-3627
Improper Link Resolution Before File Access in Apache Hadoop
Alta
CVE-2014-3137
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted
Baja
CVE-2011-3591
phpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save
Baja
CVE-2011-3592
phpMyAdmin Multiple XSS Vulnerabilities
Media
CVE-2013-6919
phpThumb is vulnerable to Server-Side Request Forgery (SSRF)
Media
CVE-2013-5958
Symfony Denial of Service Via Long Password Hashing
Alta
CVE-2014-9509
Typo3 Vulnerable to Cache Poisoning
Media
CVE-2014-3628
Improper Neutralization of Input During Web Page Generation in Apache Solr
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.