Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.737
Path Traversal in Apache Struts
Arbitrary code execution in Apache Struts 2
Jenkins Job Config History Plugin reflected XSS vulnerability
Apache Struts RCE Vulnerability
CoreFTP Directory Traversal
Apache XML Security For Java vulnerable to Infinite Loop
Improper socket reuse in Apache Tomcat
Prototype Pollution in convict
Command injection in workspace-tools
Prototype Pollution in sds
Account takeover in facturascripts
Donations <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cobbler has Exposed Dangerous Method or Function
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sos
Netty denial of service vulnerability
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
Plaintext Storage of Sensitive Information in Laravel Log Viewer before v0.13.0
ChakraCore information disclosure vulnerability
ChakraCore Security Bypass
ChakraCore information disclosure vulnerability
Loop with Unreachable Exit Condition in Apache PDFBox
Apache Sentry may allow attacker to access/remove data from Sentry protected table
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.