Media
6d700580-1374-4a17-a6b3-59ba1d063030
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Alta
4ccc8f3b-9028-45db-8db2-574736fe3ccb
WordPress Download Manager < 3.1.22 - Cross-Site Request Forgery
Media
CVE-2021-29484
DOM XSS in Theme Preview
Crítica
CVE-2021-30492
Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain
Alta
ghsa-4mg9-vhxq-vm7j
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
Alta
CVE-2021-29472
Composer's missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial
Media
CVE-2021-21429
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin
Media
CVE-2021-21365
Cross-Site Scripting in Bootstrap Package
Alta
CVE-2020-15225
Potential DoS with NumberFilter conversion to integer values.
Alta
CVE-2021-20228
Ansible Exposes Sensitive Information
Media
daedec14-6177-43c7-89d4-a39c13d94ca4
LMS by LifterLMS <= 4.21.0 - Reflected Cross-Site Scripting
Media
CVE-2021-24288
AcyMailing SMTP Newsletter < 7.5.0 - Open Redirect
Crítica
CVE-2021-4434
Social Warfare <= 3.5.2 - Remote Code Execution
Sin evaluar
drupal-contrib-2021-006
drupal/samlauth - SA-CONTRIB-2021-006
Alta
CVE-2021-29441
Authentication bypass for specific endpoint
Alta
CVE-2021-29469
Node-Redis potential exponential regex in monitor mode
Media
CVE-2021-31157
WPGraphQL <= 1.3.5 - Denial of Service
Media
CVE-2021-20714
WP Fastest Cache <= 0.9.1.6 - Authenticated (Admin+) Directory Traversal to Arbitrary File Deletion
Media
CVE-2021-29425
Path Traversal and Improper Input Validation in Apache Commons IO
Media
CVE-2021-24290
Store Locator Plus <= 5.12.3 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2021-24292
Happy Addons for Elementor <= 2.23.0 & Pro Version < 1.17.0 - Stored Cross-Site Scripting
Crítica
CVE-2021-24285
Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection
Crítica
CVE-2021-24314
Goto - Tour & Travel WordPress Theme < 2.1 - SQL Injection
Alta
CVE-2021-24289
Store Locator Plus <= 5.5.15 - Authenticated Privilege Escalation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.