Media
CVE-2015-0902
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
0227e5f0-61fa-4e78-9bd4-918fdde7ab58
WordPress Leads < 1.6.3 - Authorization Bypass
Media
db2a2ca9-a12c-412d-80f7-66f1dc3e09af
Newsletter <= 3.8.2 - Open Redirect
Crítica
CVE-2015-9272
VideoWhisper Video Presentation <= 4.1.4 - Arbitrary File Upload
Alta
8a87bbfe-8cf5-4bba-90bc-902071b72bca
Aspose.PDF Exporter < 2.0 - Arbitrary File Download
Alta
4beafd91-1b89-484b-8053-b1bffdaf163a
Aspose.Words – Import and Export word documents < 2.0 - Arbitrary File Download
Crítica
CVE-2015-9271
Webcam Video Conference <= 4.91.8 - Unrestricted File Upload leading to Remote Code Execuction
Media
abb41236-d711-41d3-a1cd-2c23467e269a
Aspose Cloud eBook Generator <= 1.0 - Directory Traversal
Alta
CVE-2015-0901
flashy <= 1.3 - Cross-Site Scripting
Alta
6c439914-1d5a-4607-8e5c-9279fa3b462c
Ajax Search Lite < 3.11 - Missing Authorization to Remote Code Execution
Alta
CVE-2015-1785
WordPress Gallery Plugin – NextGEN Gallery < 2.0.77.3 - Arbitrary File Upload
Alta
CVE-2015-1784
WordPress Gallery Plugin – NextGEN Gallery < 2.0.77.3 - Cross-Site Request Forgery
Media
135213d6-8058-4573-a97d-a95b0708d807
Ptengine – Heatmap Analytics < 1.0.2 - Reflected Cross-Site Scripting
Crítica
3ccd7300-f22a-405a-8087-9c750cb187a5
InBoundio Marketing < 2.0.1 - Arbitrary File Upload
Alta
CVE-2015-2755
AB Google Map Travel (AB-MAP) < 4.0 - Cross-Site Request Forgery to Cross-Site Scripting
Media
CVE-2014-9014
Marketplace <= 2.4.0 - Path Traversal
Alta
CVE-2014-9013
WP Marketplace – Complete Shopping Cart / eCommerce Solution <= 2.4.0 - Arbitrary File Download
Alta
a53a1178-7267-4d7f-ad9e-2906c05b8fe0
MonsterInsights – Google Analytics Dashboard for WordPress <= 5.3.2 - Stored Cross-Site Scripting
Alta
95cd2bae-4ab7-4a0c-bb71-c17b119eaaa9
All-in-One WP Migration <= 2.0.4 - Missing Authorization to Database Export
Alta
2ae0d83b-a444-4141-89da-b63ce216db17
Ajax Search Pro <= 3.5 - Cross-Site Request Forgery
Media
1053ff60-469f-4940-a865-35ed28fc769a
Easy Coming Soon <= 1.6.1 - Authenticated Stored Cross-Site Scripting
Crítica
CVE-2015-2260
Gravityforms <= 1.9.3.5 - SQL Injection
Crítica
e95b2bfe-8675-4932-9b37-73ad15fa228e
Pods – Custom Content Types and Fields < 2.5.1.2 - SQL Injection
Crítica
d4994d7d-82f7-4cb0-869f-e27abe04b621
Knews Multilingual Newsletters Plugin <= 1.7.0 - SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.