Media
ghsa-39hc-v87j-747x
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Alta
CVE-2022-39381
Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp
Media
CVE-2022-3828
Video Thumbnails <= 2.12.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2022-3769
OWM Weather <= 5.6.8 - Authenticated (Contributor+) SQL Injection
Media
CVE-2022-44586
AM-HiLi <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-3610
Jeeng Push Notifications <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
8551ae2f-4be4-4dc6-952d-1d25ae127150
Jeeng Push Notifications <= 2.0.3 - Cross-Site Request Forgery
Media
CVE-2021-25059
Download Plugin <= 1.6.2 - Missing Authorization and Sensitive Information Exposure
Media
CVE-2022-44628
4ECPS Web Forms <= 0.2.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-2983
Salat Times < = 3.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
336eb1fb-dc94-417d-b9b6-488c105aab1e
Find and Replace All <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
26237984-d7b5-4a55-91f8-a2816f3d2e94
Accessibility <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scritping
Media
2061a442-eccd-4a57-a5c5-a432fcea8394
Administrator Z <= 2022.9.28 - Unauthorized File Upload via ACF
Media
CVE-2022-44576
AgentEasy Properties <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-3829
Font Awesome 4 Menus <= 4.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
0a5a0ca6-f355-4110-a533-04e46c741ec9
a3 Lazy Load <= 2.6.0 - Cross-Site Request Forgery to Settings Reset
Media
CVE-2022-3788
TablePress Plugin vulnerable to Cross-site Scripting
Media
CVE-2022-34662
Apache DolphinScheduler vulnerable to Path Traversal
Media
CVE-2022-31777
A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a mal
Crítica
CVE-2022-39353
xmldom allows multiple root nodes in a DOM
Crítica
CVE-2022-31692
Spring Security authorization rules can be bypassed via forward or include dispatcher types
Alta
CVE-2022-31690
spring-security-oauth2-client vulnerable to Privilege Escalation
Media
CVE-2022-3783
node-red-dashboard vulnerable to Cross-site Scripting
Alta
CVE-2022-42252
Apache Tomcat may reject request containing invalid Content-Length header
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.