Media
CVE-2022-32289
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Media
1610b3dd-582e-4ff2-956a-95845361c66b
Dyslexiefont Free <= 0.0.2 - Cross-Site Scripting
Media
CVE-2022-29257
AutoUpdater module fails to validate certain nested components of the bundle
Baja
CVE-2022-29247
Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled
Media
CVE-2022-29238
Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with `ContentsManager.allow_hidden = False` only
Media
CVE-2021-36849
Social Media Share Buttons <= 3.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2022-33140
Code injection in Apache NiFi and NiFi Registry
Alta
CVE-2021-33036
User account escalation in Apache Hadoop
Media
CVE-2022-1546
WooCommerce – Product Importer <= 1.5.2 - Reflected Cross-Site Scripting
Alta
CVE-2022-1938
Awin Data Feed <= 1.7 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2022-2050
WP-Paginate <= 2.1.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-1937
Awin Data Feed <= 1.7 - Reflected Cross-Site Scripting
Alta
ba52c97e-9f2a-4e48-a133-79ed31cfbf3a
HC Custom WP-Admin URL <= 1.4 - Missing Authorization to Login URL Change
Alta
CVE-2022-1957
Comment License <= 1.3.0 - Cross-Site Request Forgery to Settings Update
Media
CVE-2022-2092
WooCommerce PDF Invoices & Packing Slips <= 2.15.0 - Reflected Cross-Site Scripting
Media
CVE-2022-1956
Shortcut Macros <= 1.3 - Missing Authorization to Settings Update
Media
93c1b6d2-a818-4ce5-96b7-524fac4081b2
Photo Gallery by 10Web <= 1.6.6 - Reflected Cross-Site Scripting
Media
CVE-2022-1220
FoxyShop <= 4.8.1 - Reflected Cross-Site Scripting
Alta
CVE-2022-1912
Button Widget Smartsoft <= 1.0.1 - Cross-Site Request Forgery to Cross-Site Scripting
Crítica
CVE-2022-1057
Pricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQL Injection
Media
CVE-2022-2108
Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass
Media
CVE-2022-1732
Rename wp-login.php <= 2.6.0 - Cross-Site Request Forgery & Unauthenticated Settings Change
Media
01857d1d-4b6c-4ab0-b2ef-6a948daedbe0
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.6.1 - Cross-Site Scripting
Media
CVE-2021-36891
Photo Gallery by Supsystic <= 1.15.5 - Cross-Site Request Forgery to Plugin Settings Change
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.