Media
75424878-5976-4dc6-8a09-8eb46a7425b8
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
3887a61f-03ae-4b37-a81f-1ea39a111e3c
OTP Login Woocommerce & Gravity Forms <= 2.0 - Cross-Site Scripting
Media
CVE-2022-29438
Image Slider by NextCode <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting
Media
0a49d74a-01a6-4bd9-bc93-0006f9fe9503
BuddyForms Hook Fields <= 1.3.8 - Cross-Site Scripting
Media
CVE-2022-1896
underConstruction <= 1.20 - Authenticated (Admin+) Stored Cross-Site Scripting
Crítica
ghsa-4g82-3jcr-q52w
Malware in ctx
Alta
CVE-2022-30999
Possible cross-site scripting attack via unsanitized SVG files in FoF Upload
Alta
CVE-2022-29252
Cross-site Scripting in wiki manager join wiki page
Alta
CVE-2022-29251
Cross-site Scripting in the Flamingo theme manager
Media
CVE-2022-29567
Possible information disclosure inside TreeGrid component with default data provider
Crítica
CVE-2022-25772
Cross-site Scripting vulnerability in Mautic's tracking pixel functionality
Alta
CVE-2022-29249
Reversible One-Way Hash in io.github.javaezlib:JavaEZ
Media
CVE-2022-51011
Denial-of-service vulnerability processing large chat messages containing many newlines
Media
CVE-2022-29237
Limited Authentication Bypass for Media Files
Alta
CVE-2022-29221
PHP Code Injection by malicious block or filename in Smarty
Media
ghsa-jfxf-4frr-9j3q
XSS in various backend modules due to (un)escaping in JS notification module
Media
CVE-2022-29229
Missing Cryptographic Step in cassproject
Media
ghsa-mw6j-hh29-h379
`CHECK` failure in depthwise ops via overflows
Alta
CVE-2019-17352
JFinal file validation vulnerability
Alta
CVE-2022-29248
Drupal core - SA-CORE-2022-010
Sin evaluar
drupal-contrib-2022-045
drupal/apigee_edge - SA-CONTRIB-2022-045
Sin evaluar
drupal-contrib-2022-044
drupal/entity_browser_block - SA-CONTRIB-2022-044
Sin evaluar
drupal-contrib-2022-042
drupal/embed - SA-CONTRIB-2022-042
Alta
CVE-2022-30595
Buffer over-flow in Pillow
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.