Crítica
CVE-2023-23619
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 5.027
Restablecer filtros
Alta
CVE-2021-3803
Inefficient Regular Expression Complexity in nth-check
Alta
CVE-2021-3805
Prototype Pollution in object-path
Alta
CVE-2021-3807
Inefficient Regular Expression Complexity in chalk/ansi-regex
Media
ghsa-wfrj-qqc2-83cm
Remote command injection when using sendmail email transport
Alta
ghsa-84p7-fh9c-6g8h
Prototype Pollution in mixme
Crítica
CVE-2021-41264
UUPSUpgradeable vulnerability in @openzeppelin/contracts
Crítica
ghsa-q4h9-46xg-m3x9
UUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeable
Crítica
CVE-2021-39199
Unsafe defaults in `remark-html`
Media
CVE-2021-23439
Cross-site Scripting in file-upload-with-preview
Alta
CVE-2021-39109
Path traversal in atlasboard
Alta
CVE-2021-23406
Code Injection in pac-resolver
Baja
CVE-2021-32830
Command injection in @diez/generation
Alta
CVE-2021-39187
Parse Server crashes with query parameter
Crítica
CVE-2021-38384
Incorrect Authorization in serverless-offline
Alta
CVE-2021-39176
Missing Release of Memory after Effective Lifetime in detect-character-encoding
Alta
CVE-2021-39178
XSS in Image Optimization API for Next.js
Alta
CVE-2021-37701
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Alta
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Alta
CVE-2021-37713
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
Alta
CVE-2021-39134
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
Alta
CVE-2021-39135
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
Crítica
CVE-2021-39168
TimelockController vulnerability in OpenZeppelin Contracts
Crítica
CVE-2021-39167
TimelockController vulnerability in OpenZeppelin Contracts
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.