Alta
CVE-2021-24820
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.638
Crítica
CVE-2022-0441
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
Media
CVE-2022-21659
Observable Response Discrepancy in Flask-AppBuilder
Alta
CVE-2022-0383
WP Review Slider < 11.0 - SQL Injection
Alta
CVE-2021-24959
WP Email Users <= 1.7.6 - SQL Injection
Crítica
CVE-2022-0412
TI WooCommerce Wishlist / TI WooCommerce Wishlist Pro < 1.40.1 - Unauthenticated SQL Injection
Media
CVE-2021-24977
Use Any Font <= 6.2.0 - Unauthenticated Arbitrary CSS Appending
Media
CVE-2022-0345
Better Notifications for WP <= 1.8.6 - Email Address Disclosure
Media
CVE-2022-0380
Fotobook <= 3.2.3 - Reflected Cross-Site Scripting
Alta
CVE-2022-23988
WS Form LITE and WS Form Pro < 1.8.176 - Stored Cross-Site Scripting
Media
CVE-2022-23987
WS Form LITE and Pro < 1.8.176 - Stored Cross-Site Scripting
Media
CVE-2021-24913
Logo Showcase with Slick Slider <= 2.0 - Cross-Site Request Forgery
Crítica
CVE-2022-1165
Blackhole for Bad Bots <= 3.3.1 - Arbitrary IP Address Blocking via IP Spoofing
Alta
CVE-2022-0411
Asgaros Forum < 2.0.0 - SQL Injection
Media
CVE-2021-25034
WP User – Custom Registration Forms, Login and User Profile < 7.0 - Reflected Cross-Site Scripting
Crítica
CVE-2021-25010
Post Snippets <= 3.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2021-25042
WP Visitor Statistics (Real Time Traffic) <= 5.4 - Missing Authorization to Stored Cross-Site Scripting
Alta
CVE-2022-0385
Crazy Bone <= 0.6.0 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2021-24994
Migration, Backup, Staging – WPvivid <= 0.9.68 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2022-0339
Server-Side Request Forgery in calibreweb
Alta
CVE-2022-0273
Incorrect Authorization in calibreweb
Alta
CVE-2022-24124
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.
Media
CVE-2022-0395
Cross-site Scripting in LiveHelperChat
Media
ghsa-8w54-22w9-3g8f
Cross-site Scripting and Open Redirect in Products.CMFPlone
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.