Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
FeehiCMS Cross Site Scripting vulnerability
FeehiCMS Unrestricted Upload vulnerability
FeehiCMS Cross Site Scripting vulnerability
npm package rfc6902 vulnerable to Prototype Pollution
replicator vulnerable to Deserialization of Untrusted Data
easywebpack-cli Path Traversal vulnerability
FeehiCMS Cross Site Scripting vulnerability
FeehiCMS vulnerable to Cross Site Scripting
WSO2 carbon-registry vulnerable to Cross-site Scripting
WSO2 carbon-registry Cross-site Scripting vulnerability
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photo_detail
A vulnerability was found in collective.task up to 3.0.9. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.
Roots Soil plugin vulnerable to Cross-site Scripting
Apache Bookkeeper vulnerable to Improper Certificate Validation
Royal Elementor Addons <=1.3.55 - Missing Authorization to Subscriber+ Arbitrary Post Creation
WP CSV <= 1.8.0.0 - Reflected Cross-Site Scripting
Royal Elementor Addons <=1.3.55 - Authenticated (Subscriber+) Arbitrary Post Deletion
Portfolio – WordPress Portfolio Plugin <= 2.8.8 - Cross-Site Request Forgery in rtport_spare_me
WP CSV to Database <= 2.6 - Cross-Site Request Forgery
404 to Start <= 1.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
.NET Remote Code Execution Vulnerability
TYPO3-EXT-SA-2022-018: Multiple vulnerabilities in extension "Master-Quiz" (fp_masterquiz)
"Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.