Media
CVE-2015-2241
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.728
Media
CVE-2015-2308
Symfony Vulnerable to PHP Eval Injection
Baja
CVE-2015-3010
ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.
Media
CVE-2016-2559
phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser
Media
CVE-2016-2562
phpMyAdmin Improper Input Validation
Media
CVE-2015-3397
Yii Framework Cross-site Scripting Vulnerability
Media
CVE-2015-3935
Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability
Media
CVE-2015-3982
The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the s
Baja
CVE-2015-3989
concrete5 vulnerable to Cross-site Scripting
Media
CVE-2015-8748
Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*".
Crítica
CVE-2015-8747
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.
Alta
Explotada en ataques
CVE-2014-3120
Elasticsearch Improper Access Control vulnerability
Alta
CVE-2013-4271
Restlet Arbitrary Java Code Execution via a serialized object
Media
CVE-2010-1622
Improper Control of Generation of Code ('Code Injection') in Spring Framework
Alta
CVE-2013-4316
Code injection in Apache Struts
Alta
CVE-2013-4221
Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML
Alta
CVE-2015-7873
phpMyAdmin allows remote attackers to spoof content via the url parameter
Media
CVE-2015-8213
The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a
Alta
CVE-2015-8125
Symfony Vulnerable to Timing Attack
Media
CVE-2013-1821
Ruby vulnerable to denial of service
Media
CVE-2015-6524
Improper Input Validation in Apache ActiveMQ
Baja
CVE-2014-4986
phpMyAdmin cross-site scripting Vulnerability in Table or Column Names
Media
CVE-2015-0219
Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header,
Alta
CVE-2015-0221
The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.