Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 197
Restablecer filtrosIdentityServer Open Redirect vulnerability
tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
Umbraco Workflow's Backoffice users can execute arbitrary SQL
Remote Denial of Service Vulnerability in Microsoft QUIC
Microsoft ASP.NET Core project templates vulnerable to denial of service
OWASP.AntiSamy mXSS when preserving comments
Stored XSS via SVG File Upload
Brute force exploit can be used to collect valid usernames
Ajax Pro Cross-site Scripting
Exposure of Sensitive Information in Elastic APM .NET Agent
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free
MsQuic Remote Denial of Service Vulnerability
Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel
Vulnerable version of libwebp and can be exploited with a malicious source image
Imageflow affected by libwebp zero-day and should not be used with malicious source images.
Moq v4.20.0-rc to 4.20.1 share hashed user data
.NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.