Media
CVE-2021-23431
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Baja
CVE-2021-32830
Command injection in @diez/generation
Alta
CVE-2021-39187
Parse Server crashes with query parameter
Media
CVE-2021-23434
Prototype Pollution in object-path
Crítica
CVE-2021-23421
Prototype Pollution in merge-change
Crítica
CVE-2021-38384
Incorrect Authorization in serverless-offline
Media
CVE-2021-23419
Prototype Pollution in open-graph
Alta
CVE-2021-39176
Missing Release of Memory after Effective Lifetime in detect-character-encoding
Alta
CVE-2021-39178
XSS in Image Optimization API for Next.js
Alta
CVE-2021-32831
Code Injection in total.js
Alta
CVE-2021-3749
axios Inefficient Regular Expression Complexity vulnerability
Alta
CVE-2021-37701
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Alta
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Alta
CVE-2021-37713
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
Alta
CVE-2021-39134
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
Alta
CVE-2021-39135
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
Alta
CVE-2020-22403
Cross-Site Request Forgery in express-cart
Crítica
CVE-2021-39168
TimelockController vulnerability in OpenZeppelin Contracts
Crítica
CVE-2021-39167
TimelockController vulnerability in OpenZeppelin Contracts
Media
CVE-2021-39171
Unlimited transforms allowed for signed nodes
Alta
CVE-2021-37694
Code injection issue for java-spring-cloud-stream-template
Alta
CVE-2021-39157
Improper Handling of Exceptional Conditions in detect-character-encoding
Alta
CVE-2021-39131
Improper Handling of Unexpected Data Type in ced
Alta
CVE-2021-37695
Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.