Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.616
Cross-site Scripting in Jenkins Job Configuration History Plugin
Improper masking of credentials Jenkins in Git Plugin
3dady real-time web stats <= 1.0 - Authenticated (Administrator+) Stored Cross Site Scripting
ansible-runner vulnerable to Race Condition
ansible-runner has default temporary files written to world R/W locations
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.
Missing password strength check in notrinos/notrinos-erp
Cross site scripting in yetiforce/yetiforce-crm
Incorrect implementation of lockout feature in Keycloak
Cross site scripting in mobiledoc-kit
Cross site scripting in yetiforce/yetiforce-crm
OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) <= 3.0.3 - Missing Authorization
All-in-One WP Migration <= 7.62 - Unauthenticated Reflected Cross-Site Scripting
WordPress Ping Optimizer <= 2.35.1.2.3 - Cross-Site Request Forgery
Float to Top Button <= 2.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
BadgeOS <= 3.7.1.2 - Authenticated (Subscriber+) SQL Injection
WP Socializer – Simple & Easy Social Media Share Icons <= 7.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Exposure of password hashes in notrinos/notrinos-erp
Cross site scripting in yetiforce/yetiforce-crm
Remote code execution in Apache Flume
WP Cerber Security <= 9.0 - Authenticated (Admin+) Stored Cross-Site Scripting
WBW Currency Switcher <= 1.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Tutor LMS – eLearning and online course solution 2.0.0-2.0.8 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.