Alta
CVE-2022-0863
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Alta
CVE-2022-1624
Latest Tweets Widget <= 1.1.4 - Arbitrary Settings Update via Cross-Site Request Forgery
Media
CVE-2022-1717
Custom Share Buttons with Floating Sidebar <= 4.1 - Stored Cross-Site Scripting
Media
CVE-2022-1604
MailerLite - Signup forms <= 1.5.3 - Reflected Cross-Site Scripting
Alta
CVE-2022-1202
WP-CRM – Customer Relations Management for WordPress <= 1.2.1 - CSV injection
Media
CVE-2022-1532
Themify - WooCommerce Product Filter <= 1.3.7 - Reflected Cross-Site Scripting
Alta
CVE-2022-1608
OnePress Social Locker <= 5.6.2 - Cross-Site Request Forgery to Settings Update
Crítica
CVE-2022-0885
Member Hero <= 1.0.9 - Remote Code Execution
Media
CVE-2022-1656
JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification
Alta
CVE-2022-1657
JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion
Alta
CVE-2022-1612
Webriti SMTP Mail <= 1.0 - Cross-Site Request Forgery to options update
Crítica
CVE-2014-4657
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.
Media
CVE-2014-4658
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
Media
CVE-2014-4660
Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opp
Media
CVE-2014-4659
Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "de
Crítica
CVE-2014-4967
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as de
Crítica
CVE-2014-4966
Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code v
Crítica
CVE-2014-9390
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; m
Media
CVE-2014-8328
DCE extension for Typo3 Discloses Environment Information
Alta
CVE-2014-9720
Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determin
Crítica
CVE-2014-4172
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
Media
CVE-2014-5012
DOMPDF denial of service vulnerability
Alta
CVE-2014-5013
DOMPDF Remote Code Execution
Media
CVE-2014-5011
DOMPDF Information Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.