Sin evaluar
drupal-contrib-2021-033
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.216
Restablecer filtros
Alta
ghsa-2rh5-jvgx-pgw3
Any storage file can be downloaded from p.sh if full server path is known
Alta
ghsa-gqcf-83rq-gpfr
Any storage file can be downloaded from p.sh if full server path is known
Alta
CVE-2021-32759
Data Flow Sanitation Issue Fix
Alta
CVE-2021-29487
October CMS auth bypass and account takeover
Media
CVE-2021-37704
Exposed phpinfo() leadked via documentation files
Alta
Explotada en ataques
CVE-2021-32648
Account Takeover in Octobercms
Alta
CVE-2021-39173
Cachet vulnerable to forced reinstall
Alta
CVE-2021-39172
Cachet vulnerable to new line injection during configuration edition
Alta
CVE-2021-37711
Authenticated server-side request forgery in file upload via URL.
Alta
CVE-2021-32752
Files or Directories Accessible to External Parties in ether/logs
Alta
CVE-2021-34551
Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows
Crítica
CVE-2021-32682
elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
Alta
CVE-2021-23394
elFinder unsafe upload filtering leading to remote code execution
Crítica
CVE-2021-30108
Server-Side Request Forgery in Feehi CMS
Sin evaluar
drupal-contrib-2021-013
drupal/graphql - SA-CONTRIB-2021-013
Media
CVE-2021-31779
Server-Side Request Forgery in yoast_seo
Crítica
CVE-2021-29504
Improper Certificate Validation in WP-CLI framework
Crítica
CVE-2020-5777
Authentication bypass in MAGMI
Crítica
CVE-2021-30492
Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain
Alta
ghsa-4mg9-vhxq-vm7j
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
Crítica
CVE-2021-21426
Fixes a bug in Zend Framework's Stream HTTP Wrapper
Alta
CVE-2021-29440
Grav's Twig processing allowing dangerous PHP functions by default
Media
CVE-2021-20280
Cross-site scripting (XSS) and Server side request forgery (SSRF) in moodle
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.