Media
CVE-2021-25043
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Crítica
CVE-2021-24949
The Plus Addons for Elementor - Pro <= 5.0.6 - SQL Injection
Media
CVE-2021-39314
WooCommerce EnvioPack <= 1.2 Reflected Cross-Site Scripting
Media
CVE-2021-38361
.htaccess Redirect <= 0.3.1 Reflected Cross-Site Scripting
Media
CVE-2021-39311
link-list-manager <= 1.0 - Reflected Cross-Site Scripting
Media
CVE-2021-42547
Out-of-the-Box <= 1.20.2 - Reflected Cross-Site Scripting
Media
CVE-2021-39310
Real WYSIWYG <= 0.0.2 - Reflected Cross-Site Scripting
Alta
CVE-2021-24948
The Plus Addons for Elementor Pro <= 5.0.6 - Sensitive Data Disclosure
Media
CVE-2021-42549
Lets-Box < 1.15.3 - Reflected Cross-Site Scripting
Media
CVE-2021-39315
Magic Post Voice <= 1.2 - Reflected Cross-Site Scripting
Media
CVE-2021-39318
H5P CSS Editor <= 1.0 - Reflected Cross-Site Scripting
Media
CVE-2021-39309
Parsian Bank Gateway for Woocommerce <= 1.0 - Reflected Cross-Site Scripting
Media
CVE-2021-23150
AMP for WP – Accelerated Mobile Pages <= 1.0.77.31 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2021-4033
Cross-Site Request Forgery in kimai2
Media
CVE-2021-4050
Cross site scripting in remdex/livehelperchat
Alta
CVE-2021-3815
Prototype Pollution in @fabiocaccamo/utils.js
Crítica
CVE-2021-44684
Command injection in github-todos
Baja
CVE-2021-4049
Cross-Site Request Forgery in remdex/livehelperchat
Media
CVE-2021-42567
Cross-site Scripting in Apereo CAS
Crítica
CVE-2021-36564
Deserialization of Untrusted Data in topthink/framework
Alta
CVE-2021-4075
Server-Side Request Forgery in snipe/snipe-it
Media
CVE-2021-4005
Cross Site Request Forgery in firefly-iii
Crítica
CVE-2021-44278
Path traversal in librenms/librenms
Crítica
ghsa-xxfh-x98p-j8fr
Remote code injection in Log4j (through pax-logging-log4j2)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.