Media
CVE-2020-23049
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.393
Restablecer filtros
Baja
CVE-2021-41176
pterodactyl/panel CSRF allowing an external page to trigger a user logout event
Media
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
Media
CVE-2021-41169
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in sulu/sulu
Media
CVE-2020-25703
Exposure of Sensitive Information to an Unauthorized Actor in Moodle
Alta
CVE-2021-41824
CSV Injection Vulnerability
Alta
CVE-2021-41120
Sylius PayPal Plugin allows unauthorized access to Credit card form, exposing payer name and not requiring 3DS
Alta
CVE-2021-41126
Deleted Admin Can Sign In to Admin Interface
Alta
CVE-2021-41113
Cross-Site-Request-Forgery in Backend
Media
CVE-2021-41114
HTTP Host Header Injection
Alta
CVE-2021-41129
Pterodactyl Panel vulnerable to authentication bypass due to improper user-provided security token verification
Media
CVE-2020-20129
Cross-site Scripting in LaraCMS
Crítica
CVE-2020-20120
SQL Injection in topthink/thinkphp
Media
CVE-2021-3818
Reliance on Cookies without Validation and Integrity Checking in getgrav/grav
Alta
ghsa-36mj-6r7r-mqhf
User can obtain JWT token even if account is disabled
Sin evaluar
drupal-contrib-2021-037
drupal/domain_group - SA-CONTRIB-2021-037
Sin evaluar
drupal-contrib-2021-036
drupal/miniorange_saml - SA-CONTRIB-2021-036
Sin evaluar
drupal-contrib-2021-032
drupal/commerce - SA-CONTRIB-2021-032
Sin evaluar
drupal-contrib-2021-031
drupal/cshs - SA-CONTRIB-2021-031
Alta
CVE-2020-13677
Drupal core - SA-CORE-2021-010
Sin evaluar
CVE-2020-13673
Drupal core - SA-CORE-2021-006
Alta
ghsa-2rh5-jvgx-pgw3
Any storage file can be downloaded from p.sh if full server path is known
Alta
ghsa-gqcf-83rq-gpfr
Any storage file can be downloaded from p.sh if full server path is known
Crítica
CVE-2021-38302
SQL injection in TYPO3 extension
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.