Media
CVE-2015-5241
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Alta
Explotada en ataques
CVE-2017-9805
REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering
Alta
CVE-2017-9804
Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used
Alta
CVE-2017-9793
The REST Plugin in Apache Struts is using an outdated XStream library
Alta
CVE-2017-9787
Spring AOP functionality (Struts) vulnerable to DoS attack
Media
CVE-2017-7672
Apache Struts Improper Input Validation vulnerability
Media
CVE-2017-15707
Moderate severity vulnerability that affects org.apache.struts:struts2-rest-plugin
Crítica
CVE-2017-12611
Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal
Alta
CVE-2018-1327
Apache Struts REST Plugin can potentially allow a DoS attack
Alta
Explotada en ataques
CVE-2017-9822
DNN (aka DotNetNuke) has Remote Code Execution via a cookie
Media
CVE-2016-7119
Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN)
Crítica
CVE-2015-2794
The installation wizard in DotNetNuke (DNN) allows privilege escalation
Media
CVE-2015-1566
Moderate severity vulnerability that affects DotNetNuke.Core
Crítica
CVE-2018-7489
FasterXML jackson-databind allows unauthenticated remote code execution
Alta
CVE-2018-1000180
Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator
Alta
CVE-2018-12538
Access and integrity issue within Eclipse Jetty
Media
CVE-2018-11040
Moderate severity vulnerability that affects org.springframework:spring-core
Media
CVE-2018-11039
Spring Framework Cross Site Tracing (XST)
Media
CVE-2018-8008
ZipSlip in org.apache.storm:storm-core
Crítica
CVE-2017-0907
Critical severity vulnerability that affects recurly-api-client
Alta
CVE-2018-0764
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
Crítica
CVE-2017-3159
Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization
Crítica
CVE-2017-7525
jackson-databind is vulnerable to a deserialization flaw
Alta
CVE-2017-0929
High severity vulnerability that affects DotNetNuke.Core
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.