Media
CVE-2022-2194
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Crítica
CVE-2022-1609
The School Management Pro <= 9.9.6 - Remote Code Execution
Media
CVE-2022-2340
W-DALIL <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-2100
Page Generator <= 1.6.4 - Cross-Site Scripting
Media
CVE-2022-2090
Discount Rules for WooCommerce <= 2.4.1 - Reflected Cross-Site Scripting
Media
CVE-2022-2341
Simple Page Transition <= 1.4.1 - Stored Cross Site Scripting
Media
CVE-2022-2187
Contact Form 7 Captcha <= 0.1.1 - Reflected Cross-Site Scripting
Media
CVE-2022-2222
Download Monitor <= 4.5.9 - Authenticated Arbitrary File Download
Crítica
0a9b4c03-e7ec-48d6-87fe-67e8a5780703
a3 Responsive Slider <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
ba5d1bd4-da0d-43f4-b28f-4a4a2702b3b0
Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.6.9 - Cross-Site Scripting
Alta
CVE-2022-25898
JWS and JWT signature validation vulnerability with special characters
Baja
CVE-2022-30120
Cross site scripting in Concrete CMS
Crítica
CVE-2022-30117
Path traversal in Concrete CMS
Alta
CVE-2022-21829
Code injection in concrete CMS
Media
CVE-2022-33910
MantisBT XSS through crafted SVG documents in file_download.php
Alta
CVE-2022-21231
Prototype Pollution in deep-get-set
Media
CVE-2022-0899
Header Footer Code Manager <= 1.1.23 - Cross-Site Scripting
Sin evaluar
CVE-2022-34061
The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency
Sin evaluar
CVE-2022-34054
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and d
Sin evaluar
CVE-2022-33004
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and
Sin evaluar
CVE-2022-33000
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information an
Sin evaluar
CVE-2022-32998
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive us
Sin evaluar
CVE-2022-32997
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user inform
Sin evaluar
CVE-2022-32996
The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user informat
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.