Media
CVE-2018-18855
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Alta
CVE-2022-31052
URL previews of unusual or maliciously-crafted pages can crash Synapse media repositories or Synapse monoliths
Media
CVE-2022-30536
WP Maintenance <= 6.0.7 - Authenticated (Admin+) Cross-Site Scripting
Media
CVE-2022-2217
Cross site scripting in parse-url
Crítica
CVE-2022-2216
Server-Side Request Forgery in parse-url
Media
CVE-2022-2218
Cross site scripting in parse-url
Alta
CVE-2022-0722
Hostname confusion in parse-url
Baja
CVE-2022-33879
Apache Tika contains incomplete fix for regex DoS
Media
CVE-2022-28666
Custom Product Tabs for WooCommerce <= 1.7.7 - Subscriber+ Settings Update
Alta
CVE-2022-2240
Request a Quote <= 2.3.8 - CSV Injection
Alta
d0a81d60-d489-4786-aa21-805a1e2aa198
Ad Inserter Pro <= 2.7.15 - Arbitrary File Modification
Crítica
CVE-2022-36386
WP All Import <= 3.6.7 - Authenticated (Administrator+) Arbitrary Code Execution
Media
CVE-2022-1551
SP Project & Document Manager <= 4.57 - Sensitive File Disclosure
Media
6c6e9884-0b60-4ea8-b042-55cf0fb6a6d0
Dropdown Menu Widget <= 1.9.7 - Reflected Cross-Site Scripting
Media
63e167ef-9f03-45a8-b3dc-240ccf1ea6c3
Photo Gallery by 10Web <= 1.6.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2022-2071
Name Directory <= 1.25.3 - Cross-Site Request Forgery
Media
CVE-2022-2239
Request a Quote <= 2.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2022-26477
SystemDS CPU exhaustion vulnerability
Alta
CVE-2022-2133
OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Authentication Bypass
Alta
CVE-2022-2144
Jquery Validation For Contact Form 7 <= 5.2 - Cross-Site Request Forgery to Arbitrary Options Update
Media
CVE-2022-2168
Download Manager <= 3.2.43 - Reflected Cross-Site Scripting
Alta
CVE-2022-1672
Insights from Google PageSpeed <= 4.0.6 - Multiple Cross-Site Request Forgery
Media
bb929679-85bb-4d5b-9a99-e6081d55019f
miniOrange's Google Authenticator <= 5.5.7 - Reflected Cross-Site Scripting
Media
CVE-2022-2173
Advanced Database Cleaner <= 3.1.0 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.