Baja
CVE-2017-2651
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.728
Media
CVE-2017-2654
Emails were sent to addresses not associated with actual users of Jenkins by Email Extension Plugin
Media
CVE-2017-2648
Jenkins SSH Build Agents Plugin did not verify host keys
Alta
CVE-2017-2652
Missing permission checks in Jenkins Distributed Fork Plugin
Alta
CVE-2017-2650
Jenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypass
Crítica
CVE-2017-3202
Deserialization of Untrusted Data in Flamingo amf-serializer
Alta
CVE-2017-3203
Deserialization of Untrusted Data in Spring-flex
Media
CVE-2017-6922
Drupal core access bypass vulnerability
Alta
CVE-2017-6924
Drupal REST API can bypass comment approval
Media
CVE-2017-6921
Drupal file REST resource does not properly validate
Media
CVE-2017-7545
XML External Entity Reference in jbpmmigration
Media
CVE-2017-7559
Undertow vulnerable to Request Smuggling
Alta
CVE-2017-7556
Cross-Site Request Forgery in hawtio
Media
CVE-2017-8446
Improper Privilege Management in X-Pack
Media
CVE-2018-1002202
Improper Limitation of a Pathname to a Restricted Directory in Zip4j
Media
CVE-2018-1002200
Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver
Media
CVE-2018-1002208
Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib
Media
CVE-2018-10894
Keycloak Authentication Error
Media
CVE-2018-10890
Moodle Exposure of Sensitive Information to an Unauthorized Actor
Media
CVE-2018-10889
Moodle sensitive information disclosure
Media
CVE-2018-14636
Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively
Media
CVE-2018-14631
Moodle Cross-site Scripting
Alta
CVE-2018-14630
Moodle XML import of ddwtos could lead to intentional remote code execution
Media
CVE-2018-14658
Keycloak Open Redirect
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.