Media
CVE-2021-44777
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Alta
CVE-2020-26705
The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to expose sensitive data or perform a denial of service (DOS) via
Crítica
CVE-2020-25911
XML External Entity vulnerability in MODX CMS
Crítica
CVE-2020-36381
Vulnerability in singleCrunch function leads to arbitrary code execution via filePath parameters
Crítica
CVE-2020-36380
Vulnerability in crunch function leads to arbitrary code execution via filePath parameters
Alta
CVE-2021-41189
Communities and collections administrators can escalate their privilege up to system administrator
Media
CVE-2021-3904
Cross-Site Scripting in grav
Media
CVE-2021-39346
Google Maps Easy <= 1.9.33 - Stored Cross-Site Scripting
Alta
CVE-2021-39341
OptinMonster <= 2.6.4 - Unprotected REST-API Endpoints
Media
CVE-2021-24751
GenerateBlocks <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2021-24908
Check & Log Email <= 1.0.3 - Reflected Cross-Site Scripting
Alta
CVE-2021-24748
Email Before Download <= 6.7 - Admin+ SQL Injection
Media
CVE-2021-24927
My Calendar <= 3.2.17 - Subscriber+ Reflected Cross-Site Scripting
Media
CVE-2021-24768
WP RSS Aggregator <= 4.19.1 - Admin+ Stored Cross-Site Scripting
Media
CVE-2021-24811
Shop Page WP <= 1.2.7 - Authenticated Cross-Site Scripting
Alta
CVE-2021-24860
BSK PDF Manager <= 3.1.1 - Admin+ SQL Injection
Media
7759b209-4211-4ee5-ae7a-42645f5d5e96
Contest Gallery < 13.1.0.7 - Authenticated Email Address Disclosure
Media
6a906f90-fac2-43cf-8f67-99f8862dc636
Ibtana - Ecommerce Product Addons <= 0.2.3 - Reflected Cross-Site Scripting
Media
CVE-2021-24822
Stylish Cost Calculator <= 7.0.3 - Stored Cross-Site Scripting
Alta
CVE-2021-24755
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.2 - Subscriber+ SQL Injection
Media
CVE-2021-24918
Smash Balloon Social Post Feed <= 4.0 - Arbitrary Plugin Settings Update to Stored Cross-Site Scripting
Media
CVE-2021-23174
Download Monitor <= 4.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2021-31567
Download Monitor <= 4.4.6 - Authenticated (Admin+) Arbitrary File Download
Media
CVE-2021-36920
Download Monitor <= 4.4.6 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.