Media
CVE-2021-24781
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
48b4214f-b722-405e-9bb7-a1faa68f0429
Cardinity Payment Gateway for WooCommerce <= 3.0.6 - Reflected Cross-Site Scripting
Media
CVE-2021-24539
Coming Soon, Under Construction & Maintenance Mode By Dazzler <= 1.6.3 - Admin+ Stored Cross-Site Scripting
Media
CVE-2021-39347
Stripe for WooCommerce 3.0.0 - 3.3.9 - Missing Authorization Controls to Financial Account Hijacking
Media
CVE-2021-36869
Ivory Search <= 4.6.6 - Reflected Cross-Site Scripting
Media
CVE-2021-25959
Cross-site Scripting in OpenCRX
Alta
CVE-2020-20693
Cross-Site Request Forgery in GilaCMS
Media
CVE-2020-20696
Cross-site Scripting in GilaCMS
Media
CVE-2020-20695
Cross-site Scripting in GilaCMS
Crítica
CVE-2020-20120
SQL Injection in topthink/thinkphp
Alta
CVE-2021-23446
Inefficient Regular Expression Complexity in handsontable
Alta
CVE-2021-41109
LiveQuery publishes user session tokens in parse-server
Media
CVE-2021-25963
Cross-site Scripting in shuup
Crítica
3e1f64f5-090a-4961-8490-d34f458a8d44
JS Job Manager < 1.1.9 - Arbitrary Plugin Installation/Activation
Media
CVE-2021-41580
Improper Access Control in passport-oauth2
Crítica
CVE-2021-38299
Improper Access Control in Webauthn Framework
Media
CVE-2021-3822
Regular Expression Denial of Service in jsoneditor
Media
CVE-2021-3818
Reliance on Cookies without Validation and Integrity Checking in getgrav/grav
Media
CVE-2021-3819
Cross-Site Request Forgery in firefly-iii
Alta
CVE-2021-3820
inflect vulnerable to Inefficient Regular Expression Complexity
Media
CVE-2021-23445
Cross site scripting in datatables.net
Media
CVE-2021-41106
File reference keys leads to incorrect hashes on HMAC algorithms
Alta
ghsa-36mj-6r7r-mqhf
User can obtain JWT token even if account is disabled
Media
CVE-2021-39342
Credova_Financial <= 1.4.8 - Sensitive Information Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.