Media
CVE-2016-6212
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
Alta
CVE-2016-6211
Drupal Saving user accounts can sometimes grant the user all roles
Media
CVE-2016-6298
The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartex
Media
CVE-2016-9452
Drupal Denial of service via transliterate mechanism
Alta
CVE-2016-9187
Moodle Unrestricted file upload vulnerability
Alta
CVE-2016-9450
Drupal Incorrect cache context on password reset page
Media
CVE-2016-9188
Moodle XSS Vulnerability
Media
CVE-2015-1796
Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML
Alta
CVE-2016-5393
Improper Access Control in Apache Hadoop
Alta
CVE-2015-2171
Slim vulnerable to PHP object injection
Media
CVE-2015-2241
Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a m
Media
CVE-2015-2308
Symfony Vulnerable to PHP Eval Injection
Baja
CVE-2015-3010
ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.
Media
CVE-2016-2559
phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser
Media
CVE-2016-2562
phpMyAdmin Improper Input Validation
Media
CVE-2015-3397
Yii Framework Cross-site Scripting Vulnerability
Media
CVE-2015-3935
Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability
Media
CVE-2015-3982
The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the s
Baja
CVE-2015-3989
concrete5 vulnerable to Cross-site Scripting
Media
CVE-2015-8748
Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*".
Crítica
CVE-2015-8747
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.
Alta
Explotada en ataques
CVE-2014-3120
Elasticsearch Improper Access Control vulnerability
Alta
CVE-2013-4271
Restlet Arbitrary Java Code Execution via a serialized object
Media
CVE-2010-1622
Improper Control of Generation of Code ('Code Injection') in Spring Framework
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.