Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
OpenStack Glance Server-Side Request Forgery (SSRF)
Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability
OpenStack Keystone does not invalidate existing tokens when granting or revoking roles
OpenStack Swift Unauthorized delete of versioned Swift object
OpenStack Swift metadata constraints are not correctly enforced
OpenStack Heat template URL information leakage
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
OpenStack Neutron Improper Input Validation vulnerability
OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting
OpenStack Swift Unchecked user input in XML responses
OpenStack Nova Multiple directory traversal vulnerabilities
OpenStack Nova Denial of Service in network source security groups
OpenStack Nova Long server names grow nova-api log files significantly
eyeD3 is vulnerable to arbitrary file modification via symlink attack
Cobbler Path Traversal vulnerability
Cobbler XSS Vulnerability
OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service
OpenStack Nova DoS through ephemeral disk backing files
OpenStack Nova live snapshots use an insecure local directory
OpenStack Nova Potential Xen connection password leak via StorageError
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.