Media
CVE-2020-28847
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Media
CVE-2022-27463
Open redirect in wwbn/avideo
Alta
CVE-2022-0602
Cross-site Scripting in TastyIgniter
Alta
CVE-2022-23974
Logic error in Apache Pinot
Media
89a23d5a-7728-403e-b654-595d92c20b66
eRoom – Zoom Meetings & Webinar <= 1.3.7 - Unauthorized Setting Update
Crítica
CVE-2022-0992
SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup
Media
CVE-2022-0428
Content Egg <= 5.3.0 - Reflected Cross-Site Scripting
Alta
5e6218e5-84d9-4180-8275-7da24c554c72
Unify <= 3.2.5 - Cross-Site Scripting
Baja
ghsa-wf98-vxv9-jqfv
XSS Injection Vulnerability
Crítica
CVE-2022-26969
Insecure default value for CORS configuration
Alta
CVE-2022-24814
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in directus
Alta
ghsa-5jfw-35xp-5m42
Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown
Alta
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error i
Media
CVE-2021-36896
Pricing Table <= 1.5.2 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2021-36910
WP-Appbox <= 4.3.20 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2021-44138
Path Traversal in Caucho Resin
Alta
CVE-2021-43464
Remote code execution in Subrion
Media
CVE-2022-1233
URL Confusion When Scheme Not Supplied in medialize/uri.js
Alta
CVE-2021-25086
Advanced Page Visit Counter <= 5.0.8 - Unauthenticated Cross-Site Scripting
Crítica
e08d455e-925d-4a94-8d57-484aedc25411
Tipsacarrier < 1.5.0.5 - Unauthenticated SQL Injection
Media
CVE-2022-1218
Domain Replace <= 1.3.8 - Reflected Cross-Site Scripting
Media
9c7edcbd-83b8-405b-892a-c404947990b3
افزونه پیامک ووکامرس Persian WooCommerce SMS <= 4.4.0 - Cross-Site Scripting and SQL Injection
Media
61aaeca4-6b5c-4b00-ab71-bba976d9e1b5
Lucky Wheel for WooCommerce – Spin a Sale <= 1.0.10 - Cross-Site Scripting
Media
540d2495-7ad4-428c-b86e-9af73d0ebe51
Ad Invalid Click Protector (AICP) <= 1.2.5.2 - Reflected Cross-Site Scripting and Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.