Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Improper sanitize of SVG files during content upload ('Cross-site Scripting') in sylius/sylius
Insufficient Session Expiration in Sylius
Sensitive Information Exposure in Sylius
Sudden swap of user auth tokens in Volto
Improper Restriction of Rendered UI Layers or Frames in Sylius
Page Builder KingComposer <= 2.9.6 - Authenticated Arbitrary Profile Creation and Stored Cross-Site Scripting
Members List Plugin <= 4.3.6 - Reflected Cross-Site Scripting
Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam
Dropdown Menu Widget <= 1.9.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
MapPress Maps for WordPress <= 2.73.12 - Admin+ File Upload to Remote Code Execution
Mark Posts <= 2.0.0 - Admin+ Stored Cross-Site Scripting
Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure
Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion
Cross-site Scripting in microweber
Cross-site Scripting in microweber
Cross-site Scripting in ShowDoc
Cross-site Scripting in microweber
Deeply nested json in jackson-databind
Spoofing attack in swagger-ui
Spoofing attack in swagger-ui-dist
Integer Overflow or Wraparound in Microweber
Unrestricted Upload of File with Dangerous Type in microweber
Cross-site Scripting in microweber
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.