Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.120
Restablecer filtrosIdentityServer Open Redirect vulnerability
tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users
CLSA Directory Traversal vulnerability
SixLabors ImageSharp has Excessive Memory Allocation in Gif Decoder
SixLabors ImageSharp Out-of-bounds Write
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Mimekit has vulnerable dependency that can lead to denial of service
Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2024-30105 | .NET Denial of Service Vulnerability
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
OPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Azure Storage Movement Client Library Denial of Service Vulnerability
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Umbraco Commerce vulnerable to Stored Cross-site Scripting on Print Functionality
Umbraco Forms components vulnerable to Stored Cross-site Scripting
Umbraco CMS Vulnerable to Stored XSS on Content Page Through Markdown Editor Preview Pane
Umbraco CMS Open Redirect Bypass Protection
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.