Crítica
CVE-2021-44567
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Media
CVE-2021-44566
Cross site scripting in francoisjacquet/rosariosis
Crítica
CVE-2021-44550
Access Control vulnerability within CoreNLP
Alta
CVE-2022-23043
File upload restriction bypass in Zenario CMS
Media
CVE-2021-44565
Cross site scripting in francoisjacquet/rosariosis
Alta
CVE-2022-24614
Allocation of Resources Without Limits or Throttling in metadata-extractor
Media
CVE-2022-24613
Improper Handling of Exceptional Conditions inn metadata-extractor
Media
CVE-2022-24615
Uncaught Exception in zip4j
Crítica
CVE-2022-25098
Arbitrary file delete in ectouch/ectouch
Media
CVE-2022-25355
EC-CUBE improperly handles HTTP Host header values
Alta
CVE-2022-25838
Multi-Factor Authentication issue in Laravel Fortify
Media
CVE-2022-0681
Simple Membership <= 4.0.9 - Cross-Site Request Forgery to Arbitrary Transaction Deletion
Media
CVE-2022-23653
B2 Command Line Tool is the official command line tool for the backblaze cloud storage service. Linux and Mac releases of the B2 command-line tool version 3.2.0 and below contain a key disclosure vuln
Media
CVE-2022-23655
Missing server signature validation in OctoberCMS
Alta
CVE-2022-0654
Cookie exposure in requestretry
Alta
CVE-2022-0721
Insertion of Sensitive Information Into Debugging Code in Microweber
Alta
CVE-2022-0724
Insecure Storage of Sensitive Information in Microweber
Alta
CVE-2022-0719
Cross-site Scripting in Microweber
Media
CVE-2022-0731
Improper Authorization in dolibarr/dolibarr
Media
CVE-2022-0750
Photoswipe Masonry Gallery <= 1.2.14 Stored Cross-Site Scripting
Media
CVE-2022-4932
Total Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Media
CVE-2022-23651
b2-sdk-python TOCTOU application key disclosure
Media
CVE-2022-0692
Open Redirect in AllTube
Alta
CVE-2022-21705
Authenticated remote code execution in October CMS
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.