Media
CVE-2013-0331
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2013-0330
Jenkins allows Remote Users to Build Arbitrary Jobs
Media
CVE-2013-0328
Jenkins subject to Cross-site Scripting
Media
CVE-2013-0327
Jenkins Cross-Site Request Forgery vulnerability
Media
CVE-2013-0329
Jenkins Cross-Site Request Forgery vulnerability
Media
CVE-2013-0305
The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated ad
Media
CVE-2013-0306
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of serv
Baja
CVE-2013-0248
Incorrect Default Permissions in Apache Commons FileUpload
Media
CVE-2013-0239
Improper Authentication in Apache CXF
Baja
CVE-2013-0158
Jenkins allows attackers to obtain the master cryptographic key
Media
CVE-2013-7489
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.
Media
CVE-2013-4791
PrestaShop Stored Cross-Site Scripting Vulnerability
Alta
CVE-2013-0294
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute forc
Media
CVE-2013-6430
Improper Neutralization of Input During Web Page Generation in Spring Framework
Media
CVE-2013-7062
Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote at
Media
CVE-2013-4752
Symfony Host Header Injection vulnerability in the HttpFoundation component
Media
CVE-2013-7371
Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
Media
CVE-2013-0342
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than
Crítica
CVE-2013-4409
ReviewBoard and Djblets library are vulnerable to code execution
Alta
CVE-2013-4251
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
Alta
CVE-2013-4751
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
Media
CVE-2013-2255
OpenStack Keystone and other components vulnerable to Improper Certificate Validation
Media
CVE-2022-1571
Cross-site Scripting in FacturaScripts
Media
CVE-2022-1555
Microweber vulnerable to cross-site scripting (XSS)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.