Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Drupal core - SA-CORE-2019-004
drupal/addtoany - SA-CONTRIB-2019-039
Regular Expression Denial of Service in highcharts
Font Organizer <= 2.1.1 - Reflected Cross-Site Scripting
Jevents
Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update
WP Human Resource Management < 2.2.6 - Sensitive Information Disclosure
User Login History <= 1.7.0 - SQL Injection via OrderBy
User Login History <= 1.7.0 - SQL Injection via Order By
Better Search < 2.2.3 - SQL Injection
Apache Commons Compress vulnerable to denial of service due to infinite loop
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running t
Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL
Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation
Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core
Critical severity vulnerability that affects org.apache.solr:solr-core
spring-security-oauth and spring-security-oauth2 Open Redirect vulnerability
Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle
Cross-Site Scripting in editor.md
Import and export users and customers <= 1.14.0.2 - Cross-Site Request Forgery
SiteGround Optimizer <= 5.0.12 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.