Crítica
CVE-2022-22880
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Crítica
CVE-2022-22881
SQL Injection in Jeecg-boot
Alta
CVE-2022-25307
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via platform
Media
CVE-2022-0653
Profile Builder - User Profile & User Registration Forms <= 3.6.1 - Cross-Site Scripting via site_url Parameter
Media
bdce01f2-7c79-4b1d-8da2-f6ce118856a1
ARI Stream Quiz – WordPress Quizzes Builder <= 1.2.26 - Reflected Cross-Site Scripting
Media
CVE-2022-0674
Kunze Law < 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-0659
Sync QCloud COS Plugin < 2.0.1 - Authenticated (Admin+) Cross-Site Scripting
Media
5d54788a-ebfd-4291-94f2-d220fbf9050a
Contact Form 7 Connector <= 1.1.13 - Reflected Cross-Site Scripting
Media
CVE-2022-0161
ARI Fancy Lightbox <= 1.3.8 - Reflected Cross-Site Scripting
Media
CVE-2022-0633
UpdraftPlus WordPress Backup Plugin < 1.22.3 - Sensitive Information Disclosure
Alta
ghsa-7p79-6x2v-5h88
Server crash if running Python 3.10 w/ Sanic 20.12
Sin evaluar
drupal-contrib-2022-025
drupal/quickedit - SA-CONTRIB-2022-025
Media
CVE-2022-25270
Drupal core - SA-CORE-2022-004
Alta
CVE-2022-25271
Drupal core - SA-CORE-2022-003
Media
CVE-2022-25610
Simple Ajax Chat <= 20220115 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2022-23983
WP Content Copy Protection <= 3.4.4 - Cross-Site Request Forgery to Setting Update
Alta
CVE-2022-0580
Improper Access Control in librenms
Alta
CVE-2022-0587
Improper Authorization in librenms
Media
CVE-2022-0588
Missing Authorization in librenms/librenms
Media
CVE-2022-0589
Cross-site Scripting in librenms
Media
CVE-2022-0596
Microweber vulnerable to Improper Validation of Specified Quantity in Input
Media
CVE-2022-0597
Open redirect in microweber
Alta
CVE-2022-25173
Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin
Alta
CVE-2022-25174
Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Shared Groovy Libraries Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.