Media
6c06b79a-0803-4973-ba88-b97d7145f82b
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2022-1977
WP Ultimate CSV Importer <= 6.5.2 - Server-Side Request Forgery
Alta
CVE-2022-1573
HTML2WP <= 1.0.0 - Cross-Site Request Forgery
Alta
CVE-2022-29258
Cross-site Scripting in Filter Stream Converter Application in XWiki Platform
Media
CVE-2022-29256
sharp vulnerable to Command Injection in post-installation over build environment
Baja
CVE-2022-29253
Path Traversal in XWiki Platform
Media
CVE-2022-29245
Weak private key generation in SSH.NET
Media
CVE-2022-30973
Regular expression denial of service in apache tika
Alta
CVE-2022-23082
Path traversal in CureKit
Media
f708e910-7745-4ff5-9f9f-5552dbaf1113
Elementor Contact Form DB <= 1.5 - Sensitive Information Disclosure
Alta
CVE-2022-1653
Social Share Buttons by Supsystic <= 2.2.3 - Cross-Site Request Forgery to Settings Update
Crítica
CVE-2022-1625
New User Approve <= 2.4 - Cross-Site Request Forgery
Media
CVE-2022-1953
Product Configurator for WooCommerce <= 1.2.31 - Arbitrary File Deletion
Media
CVE-2022-1916
Active Products Tables for WooCommerce <= 1.0.4 - Reflected Cross-Site Scripting
Media
CVE-2022-1964
Easy SVG Support <= 3.2.0 - Cross-Site Scripting via SVG Upload
Media
CVE-2022-30533
Modern Events Calendar Lite <= 6.2.9 - Authenticated (Contributor+) Cross-Site Scripting
Alta
CVE-2022-1885
Cimy Header Image Rotator <= 6.1.1 - Cross-Site Request Forgery
Crítica
CVE-2022-1913
Add Post URL <= 2.1.0 - Cross-Site Request Forgery
Alta
1f9d8bbe-205f-44b6-a0c6-89b9135e6363
Contest Gallery – Files Upload and Contest Plugin for WordPress <= 17.0.4 - Admin+ SQL Injection
Alta
CVE-2022-31015
Uncaught Exception (due to a data race) leads to process termination in Waitress
Media
fcc96838-dde5-49f2-ac73-977a8347c455
Custom Colors for Real Estate Manager <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Alta
CVE-2022-1914
Clean-Contact <= 1.6 - Cross-Site Request Forgery
Media
CVE-2022-1843
MailPress <= 7.2.1 - Cross-Site Request Forgery
Media
e1fc6a2e-9c91-4517-8f04-fb3ea65413b8
Zengo Custom Thumbnail Image Gallery <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.