Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 620
Restablecer filtrosLibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php
LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php
Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php
LibreNMS has a stored XSS in ExamplePlugin with Device's Notes
LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php
Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI
Craft CMS Arbitrary System File Read
Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Admidio Vulnerable to HTML Injection In The Messages Section
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery when opening XLSX file
Cross-site Scripting via uploaded SVG
LibreNMS vulnerable to Stored Cross-site Scripting via File Upload
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature
starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
Concrete CMS stored XSS vulnerability in the "Top Navigator Bar" block
Kimai has an XXE Leading to Local File Read
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.