Crítica
CVE-2021-36040
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2021-36038
Magento discloses sensitive information via the Multishipping Module
Media
CVE-2021-36037
Magento is affected by an improper authorization vulnerability
Alta
CVE-2021-36044
Magento affected by a server-side denial-of-service using a GraphQL field
Alta
CVE-2021-21678
Jenkins SAML Plugin allows bypassing CSRF protection for any URL
Alta
CVE-2021-21677
RCE vulnerability in Jenkins Code Coverage API Plugin
Alta
CVE-2021-21679
Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL
Media
CVE-2021-21681
Password stored in plain text by Jenkins Nomad Plugin
Alta
CVE-2021-21680
XXE vulnerability in Jenkins Nested View Plugin
Alta
CVE-2021-40085
An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.
Alta
CVE-2021-38598
OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending ca
Alta
CVE-2021-28490
Cross-Site Request Forgery in OWASP CSRFGuard
Crítica
CVE-2020-28088
Jeecg-Boot CMS arbitrary file upload vulnerability
Crítica
CVE-2021-38148
Obsidian does not require user confirmation for non-http/https URLs.
Media
CVE-2020-22330
Subrion Cross-Site Scripting (XSS) vulnerability
Media
CVE-2021-3642
Observable Discrepancy in Wildfly Elytron
Alta
CVE-2021-33335
Liferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers
Alta
CVE-2021-33338
Liferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs
Media
CVE-2021-33339
Liferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting
Media
CVE-2021-33336
Liferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
Media
CVE-2021-35463
Liferay Portal cross-site scripting (XSS) vulnerability in the Frontend Taglib module
Media
CVE-2021-33337
Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module
Media
CVE-2021-37916
Joplin vulnerable to Cross-site Scripting in notes
Media
CVE-2021-33326
Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.