Alta
CVE-2021-23406
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 5.016
Restablecer filtros
Baja
CVE-2021-32830
Command injection in @diez/generation
Alta
CVE-2021-39187
Parse Server crashes with query parameter
Crítica
CVE-2021-38384
Incorrect Authorization in serverless-offline
Alta
CVE-2021-39176
Missing Release of Memory after Effective Lifetime in detect-character-encoding
Alta
CVE-2021-39178
XSS in Image Optimization API for Next.js
Alta
CVE-2021-37701
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Alta
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Alta
CVE-2021-37713
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
Alta
CVE-2021-39134
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
Alta
CVE-2021-39135
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
Crítica
CVE-2021-39168
TimelockController vulnerability in OpenZeppelin Contracts
Crítica
CVE-2021-39167
TimelockController vulnerability in OpenZeppelin Contracts
Alta
CVE-2021-39131
Improper Handling of Unexpected Data Type in ced
Alta
CVE-2021-37695
Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.
Media
CVE-2021-32809
Clipboard feature vulnerability allowing to inject arbitrary HTML into the editor using paste functionality
Alta
CVE-2021-32808
Widget feature vulnerability allowing to execute JavaScript code using undo functionality
Media
CVE-2021-37700
Clipboard-based DOM-XSS
Media
CVE-2021-37699
Open Redirect in Next.js
Media
CVE-2021-23343
Regular Expression Denial of Service in path-parse
Media
ghsa-hxwm-x553-x359
Arbitrary Command Injection due to Improper Command Sanitization
Baja
ghsa-xh2p-7p87-fhgh
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
Alta
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
Alta
CVE-2021-32803
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.