Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Ultimate Member <= 2.11.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Non-HTML Custom Textarea Profile Field
JSON API User <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter
Printcart Web to Print Product Designer for WooCommerce <= 2.5.2 - Unauthenticated Arbitrary File Deletion
AR for WooCommerce <= 8.40 - Unauthenticated Path Traversal to Arbitrary File Read via 'file' Parameter
OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn
OpenClaw: Exec approval display truncation could hide the command being approved
OpenClaw: Message read actions could skip channel allowlist checks
NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via 'real_val__' Parameter
Openstack tripleo-heat-templates unauthenticated file access
OpenStack Nova Filter Scheduler Bypass
OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
OpenStack Nova Denial of service attack on the compute host
Kallithea Routes CSRF Bypass
MySQL Connectors Privilege Escalation
Matrix Synapse Security Filtering Flaw
Cobbler Arbitrary File Read
Openstack Aodh can be used to launder Keystone trusts
OpenStack Keystone Logs Passwords
OpenStack Identity Keystone Improper Privilege Management
OpenStack Identity Keystone Exposure of Sensitive Information
OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege
OpenStack Identity (Keystone) Denial of Service
Improper Access Control in MySQL Connector Python
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.