Crítica
CVE-2020-13675
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
CVE-2020-13674
Drupal core - SA-CORE-2021-007
Sin evaluar
CVE-2020-13673
Drupal core - SA-CORE-2021-006
Media
CVE-2021-36841
YITH Maintenance Mode <= 1.3.7 - Stored Cross-Site Scripting
Media
CVE-2021-24732
PDF Flipbook, 3D Flipbook WordPress – DearFlip Lite <= 1.7.12 - Contributor+ Stored Cross-Site Scripting
Media
CVE-2021-24677
Find My Blocks < 3.4.0 - Sensitive Information Disclosure
Media
CVE-2021-24743
Podcast Subscribe Buttons < 1.4.2 - Stored Cross-Site Scripting
Media
9de09daa-a3e0-4563-bdc9-79cb5e4b039b
SEO Redirection Plugin – 301 Redirect Manager <= 7.8 - Cross-Site Request Forgery
Media
CVE-2021-24734
Compact WP Audio Player <= 1.9.6 - Contributor+ Stored Cross-Site Scripting
Media
CVE-2021-24516
PlanSo Forms <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Crítica
CVE-2021-24684
PDF Light Viewer <= 1.4.11 - Authenticated Command Injection
Media
CVE-2021-24736
Shared Files – Easy Download Manager and File Sharing Plugin with Frontend File Upload <= 1.6.56 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2021-24735
Compact WP Audio Player <= 1.9.6 - Setting Change via Cross-Site Request Forgery
Alta
CVE-2021-3666
body-parser-xml vulnerable to Prototype Pollution
Alta
ghsa-2rh5-jvgx-pgw3
Any storage file can be downloaded from p.sh if full server path is known
Alta
ghsa-gqcf-83rq-gpfr
Any storage file can be downloaded from p.sh if full server path is known
Media
CVE-2021-40823
matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver
Crítica
CVE-2021-3645
merge vulnerable to Prototype Pollution
Alta
CVE-2021-23440
Prototype Pollution in set-value
Crítica
CVE-2021-40146
Remote Code Execution in Any23
Crítica
CVE-2021-38555
XML Injection in Any23
Alta
CVE-2021-40839
The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.
Media
CVE-2021-20792
Quiz and Survey Master <= 7.1.13 - Cross-Site Scripting
Media
CVE-2021-24656
Simple Social Media Share Buttons <= 3.2.3 - Admin+ Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.