Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this
Joomla! Framework Remote Code Injection Vulnerability
TYPO3 Cross-site Scripting vulnerability
TYPO3 CMS indexed search Cross-site Scripting vulnerability
TYPO3 allows remote attackers to embed Flash videos from external domain
Typo3 XSS Vulnerability
Dolibarr ERP and CRM contain XSS Vulnerabilities
Improper Neutralization of Input During Web Page Generation in Apache Solr
Improper Neutralization of Input During Web Page Generation in Apache Solr
phpMyAdmin cross-site scripting Vulnerability via ENUM value
Apache Ranger Cross-site Scripting vulnerability
Drupal Open Redirect
Drupal CRLF injection vulnerability in the drupal_set_header function
Apache Ranger allows users to bypass intended access restrictions via direct access to module URLs
Drupal Form API ignores access restrictions on submit buttons
Drupal saving user accounts can sometimes grant the user all roles
Apache Ranger allows users to bypass intended access restrictions via the REST API
Drupal Reflected file download vulnerability
Drupal sensitive information disclosure
The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the
Drupal Brute force amplification attacks via XML-RPC
Apache Ranger Access Restriction Bypass
Drupal Open redirect vulnerability in the drupal_goto function
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.