Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Insertion of Sensitive Information into Log File in typo3/cms-core
Information Disclosure via Export Module
Rundeck's Key Storage converter plugin mechanism's encryption layer not working in 4.2.0, 4.2.1, 4.3.0
Formula Injection in Exported Data
Insufficient HTML Sanitization
Ghost vulnerable to remote code execution in locale setting change
Path traversal for local publishers in TechDocs backend
ProxyAgent vulnerable to MITM
Signature forgery in Biscuit
XML External Entity Reference in drools
Insufficiently Protected Credentials in PowerJob
Joplin Cross Site Scripting Vulnerability via NOSCRIPT tags
FLV Embed <= 1.2.1 - Cross-Site Request Forgery to Options Update
Page Link Manager <= 1.0b - Cross-Site Request Forgery to Settings Update
Thumbnail For Excerpts <= 2.1 - Cross-Site Request Forgery
WP OER <= 0.9.0 - Cross-Site Scripting
GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure
Special Text Boxes <= 5.9.110 - Cross-Site Scripting
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.0.8 - Server-Side Request Forgery
SP Project & Document Manager <= 4.56 - Cross-Site Request Forgery and Cross-Site Scripting
Interactive Medical Drawing of Human Body <= 2.4 - Cross-Site Scripting
WordPress Multisite Content Copier/Updater <= 1.4.0 - Cross-Site Scripting
Hot Linked Image Cacher <= 1.16 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.