Media
CVE-2021-40616
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Alta
CVE-2022-25167
Remote Code Execution in Apache Flume
Alta
CVE-2021-40660
Regular expression denial of service in Delight Nashorn Sandbox
Media
CVE-2022-2079
Cross-site Scripting in NocoDB
Media
fe4171b9-b17e-4e6e-9ab4-4b1b125e8950
Lana Email Tester <= 1.0.0 - Missing Authorization to Mail Relay & Cross-Site Request Forgery
Media
e702675c-b3ec-458b-a382-cba5c03879c2
OnePress Opt-In Panda <= 2.6.2 - Missing Authorization on AJAX Actions
Crítica
df46b3d5-a433-47b5-99b8-117591f7dd16
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.10 - Code Injection
Crítica
d7f024c5-80d8-490f-b448-9bccb877024b
Premium Courses & eLearning <= 1.0.5 - SQL Injection
Alta
19bd105a-823d-4a85-87e1-54291274a842
Export to Text <= 2.4 - Unauthenticated Post Export
Alta
CVE-2022-1626
Sharebar <= 1.4.1 - Cross-Site Request Forgery to Settings Update & Cross-Site Scripting
Alta
CVE-2022-1757
pagebar <= 2.65 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting
Media
CVE-2022-30184
Potential leak of NuGet.org API key
Alta
CVE-2022-29241
Jupyter server Token bruteforcing
Media
CVE-2022-28612
Popup | Custom Popup Builder <= 1.3.1 - Missing Capabilities Check
Media
CVE-2022-32280
XO Slider <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2022-29406
WordPress Team Manager <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2022-27859
Travel Management <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2022-29894
Cross-site Scripting in Strapi
Crítica
CVE-2021-37404
Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2
Media
CVE-2022-2060
Cross site scripting in dolibarr
Alta
CVE-2022-2064
Insufficient Session Expiration in NocoDB
Alta
CVE-2022-2063
Improper Privilege Management in NocoDB
Alta
CVE-2022-2062
NocoDB information disclosure vulnerability
Crítica
CVE-2022-2067
SQL Injection in RosarioSIS
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.