Alta
ghsa-cc2j-92jq-wgjg
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.540
Alta
ghsa-3vwr-jj4f-h98x
eZ Publish Remote code execution in file uploads
Media
ghsa-qhjc-hg94-245v
eZ Platform Prevent accepting app.php in URL in Platform.sh
Media
ghsa-9wwx-c723-vm8x
eZ Platform REST API returns list of all SiteAccesses
Media
ghsa-6xch-2vxx-5pvr
eZ Platform Rules to disable executable access are ignored on Platform.sh (eZ Cloud)
Alta
ghsa-45qm-j4m9-whv9
eZ Platform CSRF token in login form is disabled by default
Alta
ghsa-hfpp-2vhw-qq43
eZ Platform Admin UI Password reset vulnerability
Alta
ghsa-2w9p-xxqr-h253
eZ Platform Object Injection in SiteAccessMatchListener
Alta
ghsa-q73v-79x3-jv2w
eZ Platform Admin UI Cross-site Scripting vulnerability
Alta
ghsa-cg84-55jx-4237
eZ Platform Password reset vulnerability
Media
ghsa-4c2w-v5rq-5mx7
eZ Platform Editor Cross-site Scripting (XSS)
Media
ghsa-jrpw-8884-2747
eZ Platform Bundled jQuery affected by CVE-2019-11358
Alta
ghsa-9cq2-pcgr-8h62
Cross-site Scripting in eZFind spellcheck
Media
ghsa-xmp3-7745-g4vj
ezsystems/ez-support-tools Failing access control in system info view
Alta
ghsa-jq9q-6p42-qpr7
Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS
Alta
ghsa-8c85-4rr5-chr4
Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS
Media
ghsa-mvf6-3f2g-xfxf
endroid/qr-code-bundle File Disclosure via logo_path query parameter
Media
ghsa-qf65-hph9-453r
Drupal Cross-Site Scripting (XSS) affecting CKEditor Third-party library
Alta
ghsa-j66p-fvp2-fxhj
Drupal core Arbitrary PHP code execution
Media
ghsa-337w-fxpq-5m34
Drupal core uses a vulnerable Third-party library CKEditor
Media
ghsa-wxfg-253g-m7r4
Drupal core Open Redirect vulnerability
Alta
ghsa-m9fv-whq2-6wmc
Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar
Media
ghsa-5x28-3f32-x523
Drupal core Access control bypass
Media
ghsa-w333-5f96-mjrr
Drupal core Denial of Service
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.