Crítica
CVE-2018-8016
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.737
Alta
CVE-2018-7644
SimpleSAMLphp Improper Verification of Cryptographic Signature
Alta
CVE-2018-7408
Incorrect Permission Assignment for Critical Resource in NPM
Crítica
CVE-2018-6835
Etherpad Lite Access Restriction Bypass
Crítica
CVE-2018-6521
SimpleSAMLphp Use of insecure connection charset (sqlauth module)
Alta
CVE-2018-3258
Improper Privilege Management in MySQL Connectors Java
Alta
CVE-2018-20465
Craft CMS Vulnerable to Server-Side Template Injection
Media
CVE-2018-1999047
Incorrect Authorization in Jenkins
Alta
CVE-2018-1999040
Exposure of Sensitive Information in Jenkins Kubernetes Plugin
Baja
CVE-2018-1999036
Jenkins SSH Agent Plugin exposes SSH private key password to users with permission to read the build log
Media
CVE-2018-1999032
Jenkins Agiletestware Pangolin Connector for TestRail Plugin CSRF vulnerability and missing permission checks
Media
CVE-2018-1999044
Infinite Loop in Jenkins Core
Media
CVE-2018-1999030
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin CSRF vulnerability and missing permission checks
Alta
CVE-2018-1999028
Jenkins Accurev Plugin CSRF vulnerability and missing permission checks
Alta
CVE-2018-1999043
Missing Release of Resource after Effective Lifetime in Jenkins
Alta
CVE-2018-19784
Weak Cryptography in PHP-Proxy
Media
CVE-2018-19620
Showdoc Unauthenticated Access
Alta
CVE-2018-19274
phpBB Remote Code Execution
Media
CVE-2018-18482
libpg_query memory leak
Alta
CVE-2018-16837
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen
Alta
CVE-2018-14523
An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in pitch/pitchyinfft.c, as demonstrated by aubionotes.
Media
CVE-2018-14020
Paymorrow Improper Input Validation vulnerability
Alta
CVE-2018-1340
Missing Encryption of Sensitive Data in Apache Guacamole
Baja
CVE-2018-13390
Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.