Crítica
ghsa-342c-vcff-2ff2
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.638
Crítica
ghsa-67r3-h899-9w95
Embedded Malicious Code in ctx
Alta
CVE-2022-29244
Packing does not respect root-level ignore files in workspaces
Alta
ghsa-c8f7-x2g7-7fxj
Phoenix-ws source code and data in extensions folder is publicly available
Crítica
CVE-2022-31799
Denial of service in bottle
Media
ff6e6101-8ba5-4cc7-9b02-67a0d9a978b6
Browser and Operating System Finder <= 1.2 - Missing Authorization
Media
CVE-2022-1951
core plugin for kitestudio themes <= 2.2.1 - Reflected Cross-Site Scripting
Media
dcd986cd-d6c0-4d8f-8078-ac0ac83572a3
My Content Management <= 1.7.1 - Cross-Site Scripting
Media
d8c0cd48-b27c-4bc1-9e5f-d918448290fb
Trade Runner <= 3.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-1470
Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site Scripting
Crítica
CVE-2022-1574
HTML2WP <= 1.0.0 - Arbitrary File Upload
Media
95bae3f2-313b-4b6c-a81c-8af6f169151b
Woody code snippets <= 2.4.5 - Reflected Cross-Site Scripting
Media
7f9b86a3-c68a-443f-a2f3-5f31f3280a6f
ShortPixel Image Optimizer <= 4.22.9 - Reflected Cross-Site Scripting
Media
CVE-2022-1985
Download Manager <= 3.2.42 - Reflected Cross-Site Scripting
Alta
CVE-2022-1572
HTML2WP <= 1.0.0 - Arbitrary File Deletion
Media
6c06b79a-0803-4973-ba88-b97d7145f82b
Import any XML or CSV File to WordPress <= 3.6.6 - Reflected Cross-Site Scripting
Media
CVE-2022-1977
WP Ultimate CSV Importer <= 6.5.2 - Server-Side Request Forgery
Alta
CVE-2022-1573
HTML2WP <= 1.0.0 - Cross-Site Request Forgery
Alta
CVE-2022-29258
Cross-site Scripting in Filter Stream Converter Application in XWiki Platform
Media
CVE-2022-29256
sharp vulnerable to Command Injection in post-installation over build environment
Baja
CVE-2022-29253
Path Traversal in XWiki Platform
Media
CVE-2022-29245
Weak private key generation in SSH.NET
Media
CVE-2022-30973
Regular expression denial of service in apache tika
Alta
CVE-2022-23082
Path traversal in CureKit
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.