Alta
CVE-2021-25073
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
CVE-2021-24923
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.24 - Reflected Cross-Site Scripting
Alta
CVE-2021-24906
Protect WP Admin <= 3.6 - Unauthenticated Plugin Deactivation
Sin evaluar
drupal-contrib-2021-047
drupal/mail_login - SA-CONTRIB-2021-047
Media
CVE-2021-25028
Event Tickets <= 5.2.1 - Open Redirect
Alta
CVE-2021-24750
WP Visitor Statistics (Real Time Traffic) <= 4.7 - SQL Injection
Media
CVE-2021-24976
Smart SEO Tool <= 3.0.5 - Reflected Cross-Site Scripting
Alta
CVE-2021-25045
Asgaros Forum <= 1.15.14 - Admin+ SQL Injection via forum_id
Media
CVE-2021-24965
Five Star Restaurant Reservations <= 2.4.7 - Subscriber+ Stored Cross-Site Scripting
Media
CVE-2021-25035
Backup and Staging by WP Time Capsule <= 1.22.6 - Reflected Cross-Site Scripting
Media
CVE-2021-24985
Easy Forms for Mailchimp <= 6.8.5 - Reflected Cross-Site Scripting
Media
CVE-2021-24694
Simple Download Monitor <= 3.9.10 - Contributor+ Stored Cross-Site Scripting via Shortcodes
Alta
CVE-2021-24696
Simple Download Monitor <= 3.9.8 - Multiple Cross-Site Request Forgery vulnerabilities
Crítica
ghsa-qc22-qwm9-j8rx
Remote Code Execution in npm-groovy-lint
Media
CVE-2022-27853
Contest Gallery <= 13.1.0.9 - Authenticated (Author+) Stored Cross-Site Scripting
Crítica
f8698529-4c55-45ad-a0c2-5f1d01944bf0
Responsive Tabs with WooCommerce Product Tab Extension <= 3.5.4 - Unauthenticated Arbitrary Option Update
Media
CVE-2021-25024
Event Calendar <= 1.1.50 - Reflected Cross-Site Scripting
Media
CVE-2021-25005
SEUR Oficial <= 1.6.0 - Cross-Site Scripting
Media
CVE-2021-24909
ACF Photo Gallery Field <= 1.7.4 - Reflected Cross-Site Scripting
Media
CVE-2021-25025
Event Calendar <= 1.1.50 - Subscriber+ Event Creation
Media
CVE-2021-24838
AnyComment <= 0.3.4 - Open Redirect via redirect parameter
Alta
CVE-2021-45105
Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion
Media
CVE-2021-34141
Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.
Alta
CVE-2021-41498
Pyo Buffer Overflow Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.