Alta
CVE-2020-36176
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
0eb90948-b2b6-4e30-b903-95b7bce5d734
Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.2 - IDOR to Sensitive Information Disclosure
Alta
CVE-2021-21234
Directory Traversal in spring-boot-actuator-logview
Media
edecb27b-ff11-4186-b8a8-41a85e3e2023
Accept Stripe Payments < 2.0.40 - Authenticated Stored Cross-Site Scripting
Media
CVE-2021-4222
WP Paginate <= 2.1.3 - Admin+ Stored Cross-Site Scripting
Alta
CVE-2021-25080
Contact Form Entries <= 1.1.6 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2020-28168
Axios vulnerable to Server-Side Request Forgery
Baja
CVE-2020-26293
XSS in HtmlSanitizer
Alta
CVE-2021-24125
Contact Form Submissions <= 1.7 - Authenticated SQL Injection
Media
CVE-2020-26291
Hostname spoofing via backslashes in URL
Baja
CVE-2020-26296
XSS in Vega
Sin evaluar
728
RealPin by Frumania - 1.5.04
Crítica
CVE-2020-36727
Newsletter Manager <= 1.5.1 - Insecure Deserialization
Baja
CVE-2020-26288
Parse Server stores password in plain text
Alta
0f87d37a-879f-4506-a651-8c965a558e28
Thumbnail carousel slider < 1.0.1 - Stored Cross-Site Scripting and Cross-Site Request Forgery
Media
CVE-2020-35678
Open Redirect in autobahn
Media
CVE-2020-29172
LiteSpeed Cache <= 3.6 - Authenticated Stored Cross-Site Scripting via IP setting
Alta
CVE-2020-26282
Server-Side Template Injection
Alta
CVE-2020-26289
regular expression denial of service (ReDoS)
Alta
CVE-2020-11093
Hyperledger Indy's update process of a DID does not check who signs the request
Media
CVE-2021-25117
WP-PostRatings <= 1.86 - Cross-Site Scripting
Media
CVE-2020-29171
All In One WP Security & Firewall <= 4.4.5 - Cross-Site Scripting
Alta
CVE-2020-35773
Site Offline Or Coming Soon Or Maintenance Mode <= 1.4.2 - Cross-Site Request Forgery and Cross-Site Scripting
Alta
CVE-2019-6715
W3 Total Cache 0.9.2.6-0.9.3 - File Read / Directory Traversal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.