Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.631
Stored Cross-site Scripting vulnerability in Jenkins Promoted Builds (Simple) Plugin
Missing permission checks in Jenkins Checkmarx Plugin allow capturing credentials
Protection Mechanism Failure in Jenkins Doktor Plugin
Stored Cross-site Scripting vulnerability in Jenkins Team Views Plugin
Cross-Site Request Forgery in Jenkins dbCharts Plugin
Missing Authorization in Jenkins dbCharts Plugin
CSRF vulnerability in Jenkins Chef Sinatra Plugin allow XXE
Missing permission checks in Jenkins Chef Sinatra Plugin allow XXE
Improper Synchronization in Jenkins Convertigo Mobile Platform Plugin
Improper Restriction of XML External Entity Reference in Jenkins Chef Sinatra
Missing permission check in Jenkins SWAMP Plugin allows capturing credentials
CSRF vulnerability in Jenkins SWAMP Plugin allows capturing credentials
Simple Quotation <= 1.3.2 - Cross-Site Request Forgery
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via browser
Better WordPress Google XML Sitemaps <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting
Easy Embed for HubSpot Forms, CTAs, Links, Files & add HubSpot to WP Search Results <= 1.1.0 - Missing Authorization to Arbitrary Options Update
WP Statistics <= 13.1.5 - Unauthenticated Blind SQL Injection via IP
WP Voting Contest < 3.0 - Reflected Cross-Site Scripting
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via IP
WP Statistics <= 13.1.5 - Unauthenticated SQL Injection
Page Builder KingComposer <= 2.9.6 - Open Redirect
Flexi - Guest Submit < 4.20 - Reflected Cross-Site Scripting
Simple Quotation <= 1.3.2 - SQL injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.