Alta
CVE-2022-34176
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Crítica
CVE-2022-22980
SpEL Injection in Spring Data MongoDB
Alta
CVE-2022-31101
Invalid order neutralization in an SQL query in PrestaShop blockwishlist module
Alta
CVE-2022-31103
Improper handling of CSS at-rules in lettersanitizer
Alta
CVE-2022-22967
Salt's PAM auth fails to reject locked accounts
Media
CVE-2022-31110
Denial of Service (DoS) vulnerability in RSSHub
Media
CVE-2022-2174
Cross-site Scripting in Microweber
Media
CVE-2022-32549
Log Injection in Apache Sling Commons Log and Apache Sling API
Media
CVE-2022-23080
Server-Side Request Forgery in Directus
Crítica
CVE-2022-34858
OAuth 2.0 client for SSO <= 1.11.3 - Authentication Bypass
Crítica
a10ba041-ded4-41d4-93ba-7fa7389acd54
WordPress OpenID Connect Client <= 2.1.7 - Authentication Bypass
Media
9d72604e-23ef-4a69-8839-cf8ff4aef3bc
Download Manager <= 3.2.43 - Reflected Cross-Site Scripting
Media
CVE-2022-2169
Loading Page with Loading Screen <= 1.0.82 - Cross-Site Scripting
Crítica
5d07d5e9-be7c-4c16-b931-d909ed8be361
Login with WHMCS <= 1.11.3 - Authentication Bypass
Alta
CVE-2022-31092
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore
Media
CVE-2022-31057
Authenticated Stored Cross-site Scripting in Shopware
Alta
CVE-2024-21907
Improper Handling of Exceptional Conditions in Newtonsoft.Json
Media
CVE-2022-30874
Cross-site Scripting in NukeViet CMS
Alta
CVE-2022-22979
Denial of Service in Spring Cloud Function
Media
CVE-2021-41924
Cross-site Scripting in krayin/laravel-crm
Alta
e9303719-3d48-4a55-ac19-0c603801d458
Dropshipping and affiliates for Amazon and woocommerce <= 1.4.3 - Missing Authorization
Media
e62a58ec-4ea5-4241-8148-fc8801bd59b3
Our Services Showcase <= 2.0 - Missing Authorization
Alta
CVE-2022-2039
Free Live Chat Support <= 1.0.11 - Cross-Site Request Forgery to Cross-Site Scripting
Media
d2b4203f-7301-4ab6-b7a1-c43516bea477
Football Live Scores <= 1.5 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.