Alta
CVE-2013-6418
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.728
Media
CVE-2013-6444
PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle
Media
CVE-2013-7073
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component
Media
CVE-2014-5325
Exposure of Sensitive Information to an Unauthorized Actor in Direct Web Remoting
Media
CVE-2014-9508
Typo3 Open Redirect In Frontend Rendering
Media
CVE-2015-1776
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
Alta
CVE-2015-5723
Doctrine Security Misconfiguration Vulnerability
Crítica
CVE-2015-7695
Zend Framework SQL injection vector using null byte for PDO
Crítica
CVE-2016-1505
Radicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component
Alta
CVE-2016-1927
phpMyAdmin Cryptographic Vulnerability
Alta
CVE-2016-2048
Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option w
Media
CVE-2016-2162
Apache Struts XSS Vulnerability
Media
CVE-2016-3093
Denial of service in Apache Struts
Crítica
CVE-2016-3082
Remote Code Execution in Apache Struts
Media
CVE-2016-6212
Drupal Views can allow unauthorized users to see Statistics information
Alta
CVE-2016-6211
Drupal Saving user accounts can sometimes grant the user all roles
Media
CVE-2016-6298
The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartex
Media
CVE-2016-9452
Drupal Denial of service via transliterate mechanism
Alta
CVE-2016-9187
Moodle Unrestricted file upload vulnerability
Alta
CVE-2016-9450
Drupal Incorrect cache context on password reset page
Media
CVE-2016-9188
Moodle XSS Vulnerability
Media
CVE-2015-1796
Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML
Alta
CVE-2016-5393
Improper Access Control in Apache Hadoop
Alta
CVE-2015-2171
Slim vulnerable to PHP object injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.