Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.120
Restablecer filtrosUmbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes
DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer
Umbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails
Umbraco CMS contains a server-side request forgery vulnerability
UmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation
AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value
ImageMagick's failure to limit MVG mutual causes Stack Overflow
ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack
Umbraco CMS has an arbitrary file upload vulnerability
Piranha has stored cross-site scripting (XSS) vulnerability
Piranha has stored cross-site scripting (XSS) vulnerability
Amazon S3 Encryption Client for .NET has a Key Commitment Issue
ABP Account Module has an Open Redirect through Improper validation in its register function
ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only)
Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
Csla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.