Crítica
CVE-2018-12972
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.737
Crítica
CVE-2018-1297
Missing certificate validation in Apache JMeter
Crítica
CVE-2018-1287
Missing certificate validation in Apache JMeter
Media
CVE-2018-1286
Apache OpenMeetings may allow authenticated attacker to deny service for privileged users
Alta
CVE-2018-12642
Froxlor Incorrect Access Control
Alta
CVE-2018-12457
express-cart allows any user to create an admin user
Media
CVE-2018-1136
Moodle Cross-site Scripting
Media
CVE-2018-1134
Moodle Improper Privilege Management
Alta
CVE-2018-11047
Cloud Foundry UAA accepts refresh token as access token on admin endpoints
Media
CVE-2018-1043
Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames
Alta
CVE-2018-10406
An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the u
Alta
CVE-2018-1000865
Improper Privilege Management in Jenkins
Alta
CVE-2018-1000866
Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass
Media
CVE-2018-1000864
Loop with Unreachable Exit Condition in Jenkins
Alta
CVE-2018-1000863
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
Alta
CVE-2018-1000817
Asset Pipeline Grails Plugin vulnerable to Path Traversal
Alta
CVE-2018-1000610
Jenkins Configuration as Code Plugin has Insufficiently Protected Credentials
Alta
CVE-2018-1000603
CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials
Alta
CVE-2018-1000600
CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials
Baja
CVE-2018-1000608
Jenkins z/OS Connector Plugin allows local attacker to retrieve configured password
Alta
CVE-2018-1000401
Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials
Media
CVE-2018-1000420
Improper authorization vulnerability in Jenkins Mesos Plugin
Alta
CVE-2018-1000403
AWS CodeDeploy Plugin stored AWS Secret Key in plain text
Media
CVE-2018-1000408
Improper Authorization in Jenkins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.