Alta
CVE-2017-7662
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Alta
CVE-2017-3162
Improper Input Validation in Apache Hadoop
Media
CVE-2017-3161
Improper Neutralization of Input During Web Page Generation in Apache Hadoop
Media
CVE-2016-5001
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
Media
CVE-2015-5640
baserCMS Access Control Bypass
Media
CVE-2011-2674
BaserCMS privilege escallation
Alta
CVE-2013-1909
The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which all
Media
CVE-2017-7725
Concrete CMS vulnerable to cross-site scripting (XSS)
Alta
CVE-2017-5637
Uncontrolled Resource Consumption in Apache ZooKeeper
Crítica
CVE-2019-9115
irisnet-crypto RCE Vulnerability
Alta
CVE-2019-5885
Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers t
Crítica
CVE-2019-5919
Nablarch Incomplete Cryptography
Crítica
CVE-2019-10844
nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which might be untrusted.
Crítica
CVE-2019-10643
Contao Does Not Expire Tokens Correctly
Alta
CVE-2017-5661
Improper Restriction of XML External Entity Reference in Apache FOP
Media
CVE-2018-14040
Bootstrap vulnerable to Cross-Site Scripting (XSS)
Media
CVE-2010-4183
HTML Purifier cross-site scripting (XSS) vulnerability
Alta
CVE-2011-5034
Apache Geronimo Hash Collisions Cause DoS
Alta
CVE-2018-10875
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing t
Alta
CVE-2019-10876
An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated use
Alta
CVE-2018-16876
ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.
Alta
CVE-2018-16856
In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are reada
Alta
CVE-2019-9735
An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security
Alta
CVE-2018-10874
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.