Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
@excalidraw/excalidraw Cross-site Scripting vulnerability
Jenkins Delphix Plugin missing permission check
Jenkins Delphix Plugin vulnerable to exposure of system-scoped credentials
Jenkins Config File Provider Plugin improper credential masking vulnerability
Jenkins NodeJS Plugin improper credential masking vulnerability
Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure
Jenkins Docker Swarm Plugin stored cross-site scripting vulnerability
Jenkins Tuleap Authentication Plugin non-constant time token comparison
Jenkins Shortcut Job Plugin stored cross-site scripting vulnerability
Jenkins Flaky Test Handler Plugin stored cross-site scripting vulnerability
Jenkins Favorite View Plugin cross-site request forgery vulnerability
Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure
Jenkins Blue Ocean Plugin cross-site request forgery vulnerability
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials
Jenkins Folders Plugin cross-site request forgery vulnerability
Jenkins Folders Plugin information disclosure vulnerability
Jenkins Folders Plugin cross-site request forgery vulnerability
Video Gallery & Management <= 3.3.5 - Cross-Site Request Forgery
WooCommerce Dynamic Pricing and Discount Rules <= 2.4.0 - Cross-Site Request Forgery
Fitness calculators plugin <= 2.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking <= 3.7.1 - Cross-Site Request Forgery
Custom Admin Login Page | WPZest <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Schedule Posts Calendar <= 5.2 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.