Alta
CVE-2020-2321
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2017-15682
Cross site scripting in Crafter CMS
Alta
CVE-2017-15683
XML injection in Crafter CMS
Media
CVE-2017-15680
Missing Authorization in Crafter CMS
Alta
CVE-2020-28975
** DISPUTED ** svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model S
Alta
CVE-2020-23489
AVideo vulnerable to Improper Privilege Management
Media
CVE-2020-28364
A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users.
Alta
CVE-2020-28267
Prototype pollution in @strikeentco/set
Media
CVE-2020-27193
Improper Neutralization of Input During Web Page Generation in CKEditor4
Crítica
CVE-2020-24407
Magento 2 Community Edition RCE via Unsafe File Upload
Media
CVE-2020-24405
Magento incorrect permissions vulnerability in the Inventory module
Baja
CVE-2020-24406
Magento information disclosure vulnerability
Media
CVE-2020-24401
Magento 2 Community Edition Incorrect Authorization
Baja
CVE-2020-24403
Magento incorrect user permissions vulnerability within the Inventory component
Media
CVE-2020-24402
Magento incorrect permissions vulnerability in the Integrations component
Alta
CVE-2020-24400
Magento SQL Injection vulnerability
Baja
CVE-2020-24404
Magento 2 Community Edition vulnerable to Improper Authorization
Media
CVE-2020-23136
Microweber Insufficient Session Expiry
Alta
CVE-2019-7357
Subrion CMS CSRF Vulnerability
Crítica
Explotada en ataques
CVE-2020-16846
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
Crítica
CVE-2020-25592
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.
Media
CVE-2020-17490
The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.
Media
CVE-2020-2317
Stored XSS vulnerability in Jenkins FindBugs Plugin
Baja
CVE-2020-2319
Password stored in plain text by Jenkins VMware Lab Manager Slaves Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.