Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 6 801
Wyczyść filtryOpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token
cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name i
OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots
Improper Link Resolution Before File Access in pip
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo
Improper Input Validation in pip
OpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user
OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM
OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function
OpenStack Glance logs user name and password in cleartext
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which al
OpenStack Keystone intended authorization restrictions bypass
OpenStack Keystone Allows Remote User Account Creation
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a U
feedparser denial of service vulnerability
Plone Denial of Service vulnerability
Django Cross-Site Request Forgery vulnerability
Denial of service in django
Session manipulation in Django
High severity vulnerability that affects Plone and Zope2
Plone Cross-site Scripting vulnerability
feedparser Cross-site Scripting vulnerability
feedparser Cross-site Scripting vulnerability
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.