Media
CVE-2021-3989
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.039
Restablecer filtros
Media
CVE-2021-4018
snipe-it is vulnerable to Cross-site Scripting
Alta
CVE-2021-3985
kimai2 is vulnerable to Cross-site Scripting
Alta
CVE-2021-4017
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Media
CVE-2021-3990
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Baja
CVE-2021-3944
bookstack is vulnerable to Cross-Site Request Forgery (CSRF)
Crítica
CVE-2021-44427
SQL Injection in rosariosis
Crítica
CVE-2021-41243
OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS
Alta
CVE-2021-41279
Potential Zip Slip Vulnerability in baserCMS
Media
ghsa-9jp8-cwwx-p64q
XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext
Media
ghsa-fxwm-rx68-p5vx
XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext
Media
CVE-2021-4026
bookstack is vulnerable to Improper Access Control
Media
CVE-2021-20841
EC-CUBE Improper access control in Management screen
Media
CVE-2021-41270
CSV Injection in symfony/serializer
Media
CVE-2021-41268
Cookie persistence after password changes in symfony/security-bundle
Crítica
ghsa-r64m-qchj-hrjp
Webcache Poisoning in shopware/platform and shopware/core
Media
CVE-2021-41267
Webcache Poisoning in symfony/http-kernel
Media
CVE-2021-22970
Server-Side Request Forgery in Concrete CMS
Media
CVE-2021-22969
Server-Side Request Forgery in Concrete CMS
Media
CVE-2021-22951
Password exposure in concrete5/core
Alta
CVE-2021-22966
Improper Privilege Management in Concrete CMS
Alta
CVE-2021-3961
Cross-site Scripting in snipe/snipe-it
Media
CVE-2021-3976
Cross-site Scripting in kimai2
Media
CVE-2021-3963
Cross-site Scripting in kimai2
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.