Crítica
CVE-2020-15362
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Alta
CVE-2020-7679
Improperly Controlled Modification of Dynamically-Determined Object Attributes in casperjs
Crítica
CVE-2020-7673
Code Injection in node-extend
Crítica
CVE-2020-7674
Improper Input Validation in access-policy
Crítica
CVE-2020-7675
Code Injection in cd-messenger
Alta
CVE-2020-7672
Code Injection in mosc
Media
CVE-2021-32817
Insecure template handling in express-hbs
Alta
CVE-2021-32818
Insecure template handling in haml-coffee
Alta
CVE-2021-32819
Insecure template handling in Squirrelly
Crítica
CVE-2021-25943
Prototype pollution in 101
Crítica
CVE-2021-25941
Prototype Pollution in deep-override
Media
CVE-2021-29624
Lack of protection against cookie tossing attacks in fastify-csrf
Baja
ghsa-g2qj-pmxm-9f8f
User enumeration in authentication mechanisms
Baja
ghsa-2frx-j9hj-6c65
User enumeration in authentication mechanisms
Media
CVE-2021-32622
Improper file handling in matrix-react-sdk
Baja
CVE-2021-32618
Open Redirect in Flask-Security-Too
Media
CVE-2021-24313
WP Prayer <= 1.6.1 - Authenticated Stored Cross-Site Scripting
Media
CVE-2021-24482
Related Posts for WordPress <= 2.0.4 - Stored Cross-Site Scripting
Media
CVE-2021-24335
Car Repair Services & Auto Mechanic < 4.0 - Reflected Cross-Site Scripting
Alta
CVE-2021-24562
LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress < 4.21.2 - Insecure Direct Object Reference
Crítica
4280654a-9eab-4541-8b82-74086d37d928
CM Registration Pro <= 3.2.0 - PHP Object Injection
Media
CVE-2021-24334
Instant Images – One Click Unsplash, Pixabay and Pexels Uploads <= 4.4.0 - Authenticated Stored Cross-Site Scripting
Media
CVE-2021-24330
Funnel Builder by CartFlows <= 1.6.12 - Authenticated Stored Cross-Site scripting via FB Pixel ID and Google Analytics ID
Media
CVE-2021-24319
Bello - Directory & Listing - < 1.6.0 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.