Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Improper Control of Generation of Code ('Code Injection') in @asyncapi/modelina
OS Command Injection in ssh2
Telefication <= 1.8.0 - Open Relay and Server-Side Request Forgery
Responsive WordPress Slider <= 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Video Gallery - Vimeo and YouTube Gallery < 1.1.5 - Stored Cross-Site Scripting
jQuery Reply to Comment <= 1.31 - Cross-Site Request Forgery
Special Text Boxes <= 5.9.109 - Authenticated (Admin+) Stored Cross-Site Scripting
Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
St Daily Tip <= 4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Game Server Status <= 1.0 - Authenticated (Admin+) SQL Injection
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion
Request a Quote <= 2.3.4 - Stored Cross-Site Scripting
WP HTML Author Bio <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
Exposure of Sensitive Information to an Unauthorized Actor in Apache Santuario
Apprise vulnerable to regex injection with IFTTT Plugin
Inefficient Regular Expression Complexity in nth-check
Prototype Pollution in object-path
Infinite loop in Tomcat due to parsing error
Arbitrary Code Execution in feehi/cms
Server-Side Request Forgery in UReport
Remote code execution in UReport
prismjs Regular Expression Denial of Service vulnerability
Exposure of Sensitive Information in keycloak
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.