Media
CVE-2024-21910
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Crítica
CVE-2020-36378
Vulnerability in packageCmd function leads to arbitrary code execution via filePath parameters
Crítica
CVE-2020-36379
Vulnerability in remove function leads to arbitrary code execution via filePath parameters
Crítica
CVE-2020-36377
Vulnerability in dump function leads to arbitrary code execution via filePath parameters
Crítica
CVE-2020-36376
Vulnerability in list function leads to arbitrary code execution via filePath parameters
Crítica
CVE-2020-36381
Vulnerability in singleCrunch function leads to arbitrary code execution via filePath parameters
Crítica
CVE-2020-36380
Vulnerability in crunch function leads to arbitrary code execution via filePath parameters
Media
CVE-2020-22864
Cross site scripting in froala-editor
Media
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
Media
CVE-2021-41184
XSS in the `of` option of the `.position()` util in jquery-ui
Media
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
Alta
CVE-2021-4229
Embedded malware in ua-parser-js
Media
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
Alta
CVE-2021-23452
Prototype Pollution in x-assign
Alta
CVE-2021-41167
modern-async's `forEachSeries` and `forEachLimit` functions do not limit the number of requests
Crítica
CVE-2021-23449
Prototype Pollution in vm2
Media
CVE-2021-41151
Path Traversal in @backstage/plugin-scaffolder-backend
Media
CVE-2021-42227
Cross site scripting in kindeditor
Alta
CVE-2021-42228
Cross Site Request Forgery in kindeditor
Media
CVE-2021-26272
Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4
Crítica
CVE-2021-25916
Prototype pollution vulnerability in 'patchmerge'
Crítica
CVE-2019-10061
OS Command Injection in node-opencv
Media
CVE-2021-39184
Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API
Crítica
CVE-2021-23448
Prototype Pollution in config-handler
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.