Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 757
Restablecer filtrosOpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
Regular expression denial of service in markdown-link-extractor
Expo on iOS is insecure due incorrect security attribute application
Node-Traceroute RCE Vulnerability
Diavante vue-storefront-api and storefront-api disclose stack trace
SQL Injection when creating an application with Reactive SQL backend
Incorrect protocol extraction via \r, \n and \t characters
Inconsistent storage layout for ERC2771ContextUpgradeable
Sandbox bypass in vm2
Exposure of Resource to Wrong Sphere in Zip-Local
Inefficient Regular Expression Complexity in marked
Inefficient Regular Expression Complexity in marked
GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior
jsx-slack insufficient patch for CVE-2021-43838 ReDoS
Regular Expression Denial of Service (ReDoS) in jsx-slack
OpenZeppelin Contracts initializer reentrancy may lead to double initialization
ERC1155Supply vulnerability in OpenZeppelin Contracts
Cross-site scripting vulnerability in TinyMCE plugins
UUPSUpgradeable vulnerability in @openzeppelin/contracts
UUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeable
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.