Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.125
Restablecer filtrosDevolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications
DotNetZip Directory Traversal vulnerability
.NET Remote Code Execution Vulnerability
.NET Denial of Service Vulnerability
HTTP Client uses incorrect token after refresh
CRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes
Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability
ICG.AspNetCore.Utilities.CloudStorage's Secure Token Durations Different Than Expected
Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs
MPXJ has a Potential Path Traversal Vulnerability
Umbraco CMS Has Incomplete Server Termination During Explicit Sign-Out
Umbraco has a Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice
Umbraco CMS logout page displayed before session expiration
Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API
Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section
Security Update for the OPC UA .NET Standard Stack
Security Update for the OPC UA .NET Standard Stack
MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow
Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability
CRLF Injection in RestSharp's `RestRequest.AddHeader` method
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.