Alta
CVE-2022-0315
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2022-25612
Simple Event Planner plugin <= 1.5.4 - Cross-Site Scripting
Media
CVE-2022-25611
Simple Event Planner <= 1.5.4 - Authenticated Stored Cross-Site Scripting
Alta
CVE-2022-26183
Untrusted Search Path in PNPM
Alta
CVE-2022-1036
Integer Overflow or Wraparound in Microweber
Alta
CVE-2022-1034
Unrestricted Upload of File with Dangerous Type in ShowDoc
Crítica
CVE-2022-26260
Prototype Pollution in simple-plist
Media
CVE-2022-0994
Hummingbird <= 3.3.1 - Admin+ Stored Cross-Site Scripting
Media
CVE-2022-1560
Amministrazione Aperta <= 3.7.3 - Admin+ Local File Inclusion
Alta
ghsa-5w9c-rv96-fr7g
Removal of functional code in faker.js
Baja
CVE-2022-21718
Renderers can obtain access to random bluetooth device without permission in Electron
Alta
CVE-2022-25481
Exposure of Resource to Wrong Sphere in ThinkPHP Framework
Alta
CVE-2022-25766
Command Injection in ungit
Crítica
CVE-2022-26960
Path Traversal in Studio-42 elFinder through 2.1.60
Crítica
CVE-2022-1020
Product Table for WooCommerce <= 3.1.2 - Missing Authorization
Media
cda2465e-b17e-4b5c-ad86-3c3c7a354d03
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.7 - Email Address Disclosure
Media
CVE-2022-0661
Ad Injection <= 1.2.0.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-0765
Loco Translate <= 2.6.0 - Authenticated Stored Cross-Site Scripting
Media
CVE-2022-1001
WP Downgrade <= 1.2.2 - Admin+ Stored Cross-Site Scripting
Crítica
CVE-2022-26184
Poetry before v1.1.9 contains Untrusted Search Path
Alta
CVE-2022-24775
guzzlehttp/psr7 <= 1.84 and 2.0.0-2.1.0 - Improper Input Validation
Media
CVE-2022-25609
Yoo Slider plugin <= 2.0.0 - Stored Cross-Site Scripting
Media
CVE-2022-25608
Yoo Slider – Image Slider & Video Slider <= 2.0.0 - Cross-Site Request Forgery
Crítica
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.