Media
CVE-2021-24810
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.631
Media
CVE-2022-0347
LoginPress <= 1.5.11 - Reflected Cross-Site Scripting via redirect-page Parameter
Media
CVE-2021-24961
WordPress File Upload <= 4.16.2 - Authenticated Stored Cross-Site Scripting via Shortcode
Media
CVE-2022-0163
Smart Forms < 2.6.71 - Missing Authorization to Sensitive Information Disclosure
Media
CVE-2021-24960
WordPress File Upload <= 4.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Malicious SVG
Alta
CVE-2022-0429
WP Cerber Security <= 8.9.5.2 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2022-0557
OS Command Injection in Microweber
Crítica
CVE-2021-44521
Apache Cassandra vulnerable to Code Injection due to unsafe configuration
Alta
CVE-2022-24289
Deserialization of untrusted data in Apache Cayenne
Media
CVE-2022-0560
Open redirect in microweber
Media
CVE-2020-13668
Cross-site Scripting in Drupal Core
Media
CVE-2021-44111
Path Traversal in S-Cart
Crítica
CVE-2021-23555
Sandbox bypass in vm2
Alta
CVE-2021-46366
Cross-Site Request Forgery in Magnolia CMS
Alta
CVE-2021-46365
Improper Restriction of XML External Entity Reference in Magnolia CMS
Alta
CVE-2021-46364
Deserialization of Untrusted Data in Magnolia CMS
Alta
CVE-2021-46363
Arbitrary code execution in Magnolia CMS
Crítica
CVE-2021-46361
Arbitrary code execution in Magnolia CMS
Alta
CVE-2021-23597
Uncaught Exception in fastify-multipart
Alta
CVE-2021-22954
Cross Site Request Forgery in concrete5/concrete5
Media
CVE-2022-0558
Cross-site Scripting in microweber
Alta
CVE-2021-44892
ThinkPHP Remote Code Execution (RCE) vulnerability
Alta
CVE-2022-0439
Email Subscribers & Newsletters <= 5.3.1 - Authenticated (or Cross-Site Request Forgery) Blind SQL Injection
Crítica
CVE-2021-23383
Prototype Pollution in handlebars
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.