Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.515
Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversal
WP Dashboard Notes <= 1.0.10 - Missing Authorization to Arbitrary Private Notes Update
Mang Board WP <= 1.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
(Simply) Guest Author Name <= 4.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
Travelpayouts <= 1.1.12 - Cross-Site Request Forgery to Settings Import
Quarkus Improper Handling of Insufficient Permissions or Privileges and Improper Handling of Exceptional Conditions vulnerability
WP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Source
Estatik Real Estate Plugin <= 4.1.0 - Reflected Cross-Site Scripting
10Web AI Assistant – AI content writing assistant <= 1.0.18 - Missing Authorization to Arbitrary Plugin Installation
Elementor Addons by Livemesh <= 8.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Arbitrary Code Execution in Processwire
Host header injection in the password reset
SQL Injection in Admin download files as zip
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
Cross-site WebSocket hijacking vulnerability in the Jenkins CLI
Path traversal vulnerability in Jenkins Matrix Project Plugin
Arbitrary file read vulnerability in Jenkins Log Command Plugin
Arbitrary file read vulnerability in Git server Plugin can lead to RCE
CSRF vulnerability in Jenkins GitLab Branch Source Plugin
Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin
Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin
Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.