Media
CVE-2021-23417
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
CVE-2021-23416
Cross-site Scripting in curly-bracket-parser
Media
CVE-2021-3664
Open redirect in url-parse
Media
CVE-2021-23413
jszip Vulnerable to Prototype Pollution
Media
CVE-2021-23343
Regular Expression Denial of Service in path-parse
Media
f810326f-f84a-4066-aa28-5caa915ba877
miniOrange's Google Authenticator <= 5.4.39 - Cross-Site Scripting
Media
ea01e11e-31b5-4cd9-8fab-3693e47f705a
Picture Gallery – Frontend Image Uploads, AJAX Photo List < 1.4.3 - Cross-Site Scripting
Media
CVE-2021-24523
Daily Prayer Time <= 2021.08.09 - Stored Cross-Site Scripting
Media
CVE-2021-24605
Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting
Media
9c2883e6-2a90-46c7-ba42-cc078e4d1670
Quiz and Survey Master <= 7.1.13 - SQL Injection
Media
CVE-2021-24616
AddToAny Share Buttons <= 1.7.47 - Authenticated Stored Cross-Site Scripting
Media
CVE-2021-24614
Book appointment online <= 1.38 - Cross-Site Scripting
Media
603846de-5d3b-498f-844b-306d80df80da
Two Factor Authentication (2FA , MFA, OTP SMS and Email) <= 1.0.7 - Cross-Site Scripting
Media
0e430180-5b89-4d06-b729-d0fdbefa8185
MWB Point of Sale (POS) for WooCommerce <= 1.0.0 - Missing Authorization
Media
CVE-2018-3718
vercel/serve allows access to restricted files if filename is URL encoded.
Media
CVE-2021-32797
JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>
Alta
CVE-2021-32798
Special Element Injection in notebook
Alta
CVE-2021-38305
Command injection in Yamale
Alta
CVE-2021-23415
Directory Traversal in elFinder.AspNet
Crítica
CVE-2021-37578
Deserialization of Untrusted Data in Apache jUDDI
Media
CVE-2021-22144
Denial of Service in Elasticsearch
Alta
CVE-2021-33900
Missing encryption in Apache Directory Studio
Crítica
CVE-2020-17952
Code injection in topthink/think
Media
CVE-2020-23234
Cross Site Scripting in LavaLite CMS
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.