Crítica
ghsa-g2q5-5433-rhrf
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Crítica
ghsa-73qr-pfmq-6rp8
Embedded malware in coa
Alta
CVE-2020-10378
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
Media
CVE-2021-3765
Inefficient Regular Expression Complexity in validator.js
Media
CVE-2021-33611
Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14
Alta
CVE-2021-41238
Missing Authorization with Default Settings in Dashboard UI
Media
CVE-2021-41973
Infinite loop in Apache MINA
Alta
CVE-2021-27644
SQL injection in Apache DolphinScheduler
Alta
CVE-2020-11476
Unrestricted Uploads in Concrete5
Media
ef7ef45a-612b-40ca-817d-05b3d29b2b05
Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Missing Authorization
Alta
c70ed02e-1183-475b-a110-4a2d8dbe610e
Nitro by WooRockets <= 1.7.9 - Missing Authorization to Arbitrary Plugin Installation
Media
c63079af-6a22-4692-ab81-96e166a00c38
Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Arbitrary Settings Change
Media
CVE-2022-0142
Visual Form Builder <= 3.0.5 - CSV Injection
Media
CVE-2021-24935
WP Google Fonts <= 3.1.4 - Reflected Cross-Site Scripting
Media
CVE-2022-0140
Visual Form Builder <= 3.0.5 - Unauthenticated Information Disclosure
Media
1dc733ec-6cc8-40fc-b4c4-1fad4bcd9f21
Email Tracker – Email Tracking Plugin to track Emails for Open and Email Links Click (Compatible with WooCommerce) < 5.2.6 - Reflected Cross-Site Scripting
Media
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
Crítica
CVE-2020-36378
Vulnerability in packageCmd function leads to arbitrary code execution via filePath parameters
Crítica
CVE-2020-36379
Vulnerability in remove function leads to arbitrary code execution via filePath parameters
Crítica
CVE-2020-36377
Vulnerability in dump function leads to arbitrary code execution via filePath parameters
Crítica
CVE-2020-36376
Vulnerability in list function leads to arbitrary code execution via filePath parameters
Media
CVE-2021-24714
Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting
Media
35b9f37c-69e1-437a-97dd-3d3e7a8cd86e
Ivory Search <= 4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2021-24718
Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder < 1.5 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.