Media
CVE-2022-3462
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
CVE-2022-41656
Account Manager for WooCommerce <= 2.1.1 - Missing Authorization
Media
CVE-2022-3484
WPB Show Core <= 2.2 - Reflected Cross-Site Scripting
Alta
CVE-2022-41136
Shortcodes Ultimate <= 5.12.0 - Cross-Site Request Forgery
Alta
CVE-2022-40131
Page View Count <= 2.5.5 - Cross-Site Request Forgery
Media
2ac1d65c-5e09-41ca-809b-2ab3ab5f62af
Shortcodes Ultimate <= 5.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Alta
CVE-2022-39300
Signature bypass via multiple root elements
Alta
CVE-2022-39299
Signature bypass via multiple root elements
Crítica
CVE-2024-23679
com.enonic.xp:lib-auth vulnerable to Session Fixation
Sin evaluar
drupal-contrib-2022-058
drupal/twig_field_value - SA-CONTRIB-2022-058
Crítica
CVE-2022-40871
Dolibarr vulnerable to Eval Injection
Crítica
CVE-2022-37614
mockery is vulnerable to prototype pollution
Alta
CVE-2022-41828
com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution
Media
ghsa-2p3c-p3qw-69r4
The graphql-upload library included in Apollo Server 2 is vulnerable to CSRF mutations
Alta
CVE-2022-41404
org.ini4j allows attackers to cause a Denial of Service (DoS)
Media
CVE-2022-40440
mxGraph vulnerable to cross-site scripting in setTooltips function
Crítica
CVE-2022-37617
thlorenz browserify-shim vulnerable to prototype pollution
Crítica
CVE-2022-37611
tschaub gh-pages vulnerable to prototype pollution
Crítica
CVE-2022-40664
Apache Shiro Authentication Bypass vulnerability
Media
CVE-2022-26375
AB Press Optimizer <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2022-41134
Optinly <= 1.0.15 - Cross-Site Request Forgery
Media
CVE-2022-40697
3com – Asesor de Cookies <= 3.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2022-41623
ALD - AliExpress Dropshipping and Fulfillment for WooCommerce Premium <= 1.1.0 - Sensitive Information Disclosure
Alta
CVE-2022-41647
Optinly <= 1.0.18 - Missing Authorization to Plugin Settings Change
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.