Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 524
Restablecer filtrosScriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of Service
Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse
Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()
Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix
Scriban has an Infinite Recursion during Object Rendering Leads to Stack Overflow and Process Crash (Denial of Service)
Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)
ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion
idunno.Bluesky, idunno.AtProto and idunno.AtProto.OAuthCallback Denial of Service Vulnerability
ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS
ImageMagick has Heap Buffer Over-Read in BilateralBlurImage
ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.
ImageMagick has heap buffer overflow in YUV 4:2:2 decoder
ImageMagick: MSL - Stack overflow in ProcessMSLScript
.NET Denial of Service Vulnerability
.NET Denial of Service Vulnerability
.NET Elevation of Privilege Vulnerability
Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks
Umbraco Backoffice API Allows Unauthorized Modification of Domain Data
ImageMagick has a Path Policy TOCTOU symlink race bypass
MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery
Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints
ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.