Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.216
Restablecer filtrosOctober CMS vulnerable to Potential Host Header Poisoning on misconfigured servers
vrana/adminer vulnerable to SSRF by connecting to privileged ports
vrana/adminer via XSS in the history parameter in SQL command
Steam Socialite Provider v1 does not correctly validate openid server
Mautic users able to download any files from server using filemanager
Kirby .dev domains and some reverse proxy setups were treated as local
Authenticated Server Side Request Forgery
Kirby Panel users could upload PHP Phar archives as content files before v2.5.14 and v3.4.5
Local File Inclusion by unauthenticated users
Drupal core - SA-CORE-2020-012
Exploitable inventory component chaining in PocketMine-MP
drupal/oauth_server_sso - SA-CONTRIB-2020-034
XSS vulnerability when listing users on add & modify server pages.
Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS
Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS
Potential Remote Code Execution in TYPO3 with mediace extension
Potentially sensitive data exposure in Symfony Web Socket Bundle
Drupal core - SA-CORE-2020-005
Upload whitelisted files to any directory in OctoberCMS
Arbitrary File Deletion vulnerability in OctoberCMS
Local File read vulnerability in OctoberCMS
Backend Same-Site Request Forgery in TYPO3 CMS
Class destructors causing side-effects when being unserialized in TYPO3 CMS
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.