Media
CVE-2021-3957
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.039
Restablecer filtros
Media
CVE-2021-22967
Exposure of sensitive information in concrete5/core
Alta
CVE-2021-22968
Improper file handling in concrete5/core
Crítica
CVE-2021-3943
Moodle vulnerable to RCE via unsafe deserialization
Media
CVE-2021-43558
Cross-site Scripting in moodle
Media
CVE-2021-39198
The disqualify lead action may be executed without CSRF token check
Crítica
CVE-2021-43996
Incorrect Access Control in Ignition
Media
CVE-2021-41273
Cross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys
Alta
CVE-2021-41165
HTML comments vulnerability allowing to execute JavaScript code
Sin evaluar
drupal-core-2021-011
Drupal core - SA-CORE-2021-011
Sin evaluar
drupal-contrib-2021-044
drupal/openid_connect_windows_aad - SA-CONTRIB-2021-044
Crítica
CVE-2021-43608
DBAL 3 SQL Injection Security Vulnerability
Media
CVE-2021-41258
Cross-site scripting (XSS) from image block content in the site frontend
Media
CVE-2021-41252
Cross-site scripting (XSS) from writer field content in the site frontend
Baja
CVE-2021-3938
snipe-it is vulnerable to Cross-site Scripting
Media
CVE-2021-3932
twill is vulnerable to Cross-Site Request Forgery (CSRF)
Media
CVE-2021-3931
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Media
CVE-2021-3921
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Alta
CVE-2021-3915
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
Media
CVE-2021-3775
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Media
CVE-2021-3683
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Media
CVE-2021-3776
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Media
CVE-2021-43561
Cross-site Scripting in pegasus/google-for-jobs
Alta
CVE-2021-43564
Unrestricted access to predictable file paths in hov/jobfair
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.