Media
CVE-2021-24281
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2021-24282
Redirection for Contact Form 7 <= 2.3.3 - Unprotected AJAX Actions
Crítica
CVE-2021-24284
Kaswara Modern VC Addons <= 3.0.1 - Arbitrary File Upload
Alta
CVE-2021-24280
Redirection for Contact Form 7 <= 2.3.3 - Authenticated PHP Object Injection
Alta
CVE-2021-24278
Redirection for Contact Form 7 <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation
Media
CVE-2021-24279
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Plugin Installation
Alta
CVE-2021-29434
Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
Alta
CVE-2021-29452
Any logged in user could edit any other logged in user.
Media
CVE-2021-48020
VVE-2021-0001: Memory corruption using function calls within arrays
Baja
CVE-2021-48019
VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption
Media
CVE-2021-29446
Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime
Media
CVE-2021-29445
Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime
Media
CVE-2021-29444
Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime
Media
CVE-2021-29443
Padding Oracle Attack due to Observable Timing Discrepancy in jose
Crítica
CVE-2021-29451
Missing validation of JWT signature in `ManyDesigns/Portofino`
Alta
ghsa-crh4-294p-vcfq
Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
Baja
CVE-2018-25007
Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11
Media
CVE-2019-25027
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Baja
CVE-2020-36319
Potential sensitive data exposure in applications using Vaadin 15
Media
CVE-2020-36321
Directory traversal in development mode handler in Vaadin 14 and 15-17
Media
CVE-2021-31404
Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18
Media
CVE-2021-31403
Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8
Alta
CVE-2021-31407
OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposure
Media
CVE-2021-31406
Timing side channel vulnerability in endpoint request handler in Vaadin 15-19
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.