Alta
CVE-2021-39165
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Crítica
CVE-2021-39168
TimelockController vulnerability in OpenZeppelin Contracts
Crítica
CVE-2021-39167
TimelockController vulnerability in OpenZeppelin Contracts
Media
CVE-2021-39171
Unlimited transforms allowed for signed nodes
Alta
CVE-2021-39174
Cachet configuration leak
Alta
CVE-2021-39173
Cachet vulnerable to forced reinstall
Alta
CVE-2021-39172
Cachet vulnerable to new line injection during configuration edition
Media
CVE-2021-24569
Cookie Notice & Compliance for GDPR / CCPA <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2021-39316
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.45 - Directory Traversal
Media
CVE-2021-4445
Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
Media
ba88a1f5-9ebf-4899-81b3-e65587ae2fe2
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting
Media
834ff44a-4259-49a5-bad3-26fce393fb98
Docket Cache – Object Cache Accelerator <= 21.08.01 - Reflected Cross-Site Scripting
Media
CVE-2021-24670
CoolClock <= 4.3.4 - Authenticated Stored Cross-Site Scripting
Media
57be47e2-9aac-42bd-af6a-5060d2f86449
User Activity Log <= 1.4.6 - Reflected Cross Site Scripting
Media
44cbaa25-7e91-4b2e-81c4-ba1d7ba02350
Multiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting
Media
CVE-2021-24610
TranslatePress <= 2.0.8 - Authenticated Stored Cross-Site Scripting
Media
CVE-2021-24633
Countdown Block <= 1.1.1 - Missing Authorization
Media
001e066f-6add-4426-8cd7-32229a9188d1
User Activity Log <= 1.4.6 - Reflected Cross-Site Scripting
Media
CVE-2021-24681
Duplicate Page <= 4.4.1 Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2020-19002
Mezzanine Cross Site Scripting (XSS) vulnerability
Crítica
CVE-2020-19001
Command Injection in Simiki
Media
CVE-2020-19000
Cross Site Scripting (XSS) in Simiki
Media
eaf17a09-3e35-4df8-acb9-7829942597c6
Woffice CRM <= 4.0.1 - Authorization Bypass
Media
cc1e9778-2860-4e3c-a2e4-28f10d585fed
CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.