Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
ViewMedica 9 <= 1.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
XWiki Realtime WYSIWYG Editor extension allows privilege escalation (PR) through realtime WYSIWYG editing
Rasa Allows Remote Code Execution via Remote Model Loading
TYPO3 DB Check Module vulnerable to Cross-Site Request Forgery
TYPO3 Scheduler Module vulnerable to Cross-Site Request Forgery
TYPO3 Indexed Search Module vulnerable to Cross-Site Request Forgery
TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery
TYPO3 Extension Manager Module vulnerable to Cross-Site Request Forgery
TYPO3 Cross-Site Request Forgery in Dashboard Module
TYPO3 Cross-Site Request Forgery in Backend User Module
TYPO3 Cross-Site Request Forgery in Log Module
TYPO3 Potential Open Redirect via Parsing Differences
TYPO3 Information Disclosure via Exception Handling/Logger
Car Demon <= 1.8.1 - Reflected Cross-Site Scripting
WP Dream Carousel <= 1.0.1b - Reflected Cross-Site Scripting
WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected Cross-Site Scripting
CodeBard Help Desk <= 1.1.2 - Reflected Cross-Site Scripting
Navigation Du Lapin Blanc <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Social Media Engine <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Bulletin Board <= 1.1.4 - Reflected Cross-Site Scripting
WP Smart TV <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Envo Multipurpose <= 1.1.6 - Missing Authorization
S-DEV SEO <= 1.88 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.