Media
259ed1a0-1bfa-4d38-845c-e5655c330702
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.610
Crítica
CVE-2022-2754
Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated SQL Injection
Alta
CVE-2022-30331
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequently, an attacker can execute arbitrary C++
Media
CVE-2022-2404
WP Popup Builder <= 1.2.8 - Reflected Cross-Site Scripting
Alta
CVE-2022-2405
WP Popup Builder <= 1.2.9 - Missing Authorization and Cross-Site Request Forgery
Alta
CVE-2022-2903
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.12 - Authenticated (Administrator+) PHP Objection Injection
Alta
CVE-2022-3098
Login Block IPs <= 1.0.0 - Cross-Site Request Forgery to Plugin Settings Update
Media
CVE-2022-2352
Post SMTP <= 2.1.6 - Authenticated (Administrator+) Blind Server-Side Request Forgery
Alta
CVE-2022-38093
All in One SEO <= 4.2.3.1 - Cross-Site Request Forgery
Alta
CVE-2022-2987
Ldap WP Login / Active Directory Integration <= 3.0.1 - Missing Authorization
Crítica
CVE-2021-24890
Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
Media
CVE-2022-2926
Download Manager <= 3.2.54 - Authenticated (Admin+) Path Traversal
Media
CVE-2022-1579
Login Block IPs <= 1.0.0 - IP Spoofing to Protection Mechanism Bypass
Media
CVE-2022-38058
WP Shamsi <= 4.1.1 - Missing Authorization to Plugin Settings Update
Media
CVE-2022-3074
Slider Hero <= 8.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-3135
SEO Smart Links <= 3.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-1755
SVG Support <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
Alta
CVE-2022-3076
CM Download Manager <= 2.8.5 - Authenticated (Administrator+) Arbitrary File Upload
Alta
CVE-2022-31152
Denial of service due to incorrect application of event authorization rules
Media
CVE-2022-38170
Apache Airflow exposes arbitrary file content
Crítica
CVE-2022-38054
Apache Airflow Session Fixation vulnerability
Alta
CVE-2022-37435
Apache ShenYu Admin has insecure permissions
Media
CVE-2022-3072
francoisjacquet/rosariosis vulnerable to Cross-Site Scripting (XSS)
Media
CVE-2022-37339
Meet My Team <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.