Baja
CVE-2021-41176
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.221
Restablecer filtros
Media
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
Media
CVE-2021-28661
SilverStripe GraphQL Server permission checker not inherited by query subclass.
Alta
CVE-2021-22958
Server-Side Request Forgery vulnerability in concrete5
Alta
CVE-2021-41129
Pterodactyl Panel vulnerable to authentication bypass due to improper user-provided security token verification
Sin evaluar
drupal-contrib-2021-033
drupal/file_extractor - SA-CONTRIB-2021-033
Alta
ghsa-2rh5-jvgx-pgw3
Any storage file can be downloaded from p.sh if full server path is known
Alta
ghsa-gqcf-83rq-gpfr
Any storage file can be downloaded from p.sh if full server path is known
Alta
CVE-2021-32759
Data Flow Sanitation Issue Fix
Alta
CVE-2021-29487
October CMS auth bypass and account takeover
Media
CVE-2021-37704
Exposed phpinfo() leadked via documentation files
Alta
Explotada en ataques
CVE-2021-32648
Account Takeover in Octobercms
Alta
CVE-2021-39173
Cachet vulnerable to forced reinstall
Alta
CVE-2021-39172
Cachet vulnerable to new line injection during configuration edition
Alta
CVE-2021-37711
Authenticated server-side request forgery in file upload via URL.
Alta
CVE-2021-32752
Files or Directories Accessible to External Parties in ether/logs
Alta
CVE-2021-34551
Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows
Crítica
CVE-2021-32682
elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
Alta
CVE-2021-23394
elFinder unsafe upload filtering leading to remote code execution
Crítica
CVE-2021-30108
Server-Side Request Forgery in Feehi CMS
Sin evaluar
drupal-contrib-2021-013
drupal/graphql - SA-CONTRIB-2021-013
Media
CVE-2021-31779
Server-Side Request Forgery in yoast_seo
Crítica
CVE-2021-29504
Improper Certificate Validation in WP-CLI framework
Crítica
CVE-2020-5777
Authentication bypass in MAGMI
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.