Media
CVE-2022-24820
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.638
Media
CVE-2022-24821
Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx
Media
CVE-2022-24819
Unauthenticated user can retrieve the list of users through uorgsuggest.vm
Alta
CVE-2020-1469
Infinite loop in .Net Bond
Crítica
CVE-2021-43421
elFinder Unrestricted File Upload vulnerability
Crítica
CVE-2022-26612
Path traversal in Hadoop
Media
CVE-2021-24800
DW Question & Answer Pro <= 1.3.6 - Missing Authorization Checks
Alta
CVE-2021-24957
Advanced Page Visit Counter <= 6.1.5 - Subscriber+ Blind SQL injection
Alta
86f7eb83-8483-4c6b-993e-ce11084241e8
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting
Media
574dd6d8-14df-47b8-bf03-28a3c02b73ec
BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.13 - SQL Injection
Media
CVE-2021-24805
DW Question & Answer Pro <= 1.3.6 - Cross-Site Request Forgery
Media
CVE-2022-0314
Nimble Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
Alta
CVE-2021-25111
English WordPress Admin <= 1.5.1.1 - Unauthenticated Open Redirect
Media
CVE-2021-36846
Floating Chat Widget: Contact Icons, Messages, Telegram, Email, SMS, Call Button – Chaty <= 2.8.3 - Admin+ Stored Cross-Site Scripting
Alta
CVE-2022-24822
Denial of Service vulnerability in @podium/layout and @podium/proxy
Alta
CVE-2022-24815
SQL Injection when creating an application with Reactive SQL backend
Alta
CVE-2016-5385
HTTP Proxy header vulnerability
Media
CVE-2022-27845
Plausible Analytics <= 1.2.2 - Stored Cross-Site Scripting
Media
CVE-2022-27844
Migration, Backup, Staging – WPvivid <= 0.9.70 - Authenticated Arbitrary File Read
Media
CVE-2022-0864
UpdraftPlus WordPress Backup Plugin < 1.22.9 Reflected Cross-Site Scripting
Alta
CVE-2022-0993
SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass
Media
CVE-2022-1046
Visual Form Builder <= 3.0.6 - Admin+ Cross-Site Scripting
Media
CVE-2022-0901
Ad Inserter Free and Pro <= 2.7.11 - Reflected Cross-Site Scripting
Alta
CVE-2021-43138
async <= 2.6.3 and 3-3.2.2 - Prototype Pollution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.