Alta
CVE-2021-24651
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
CVE-2021-4379
WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
Media
CVE-2021-4376
WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
Crítica
CVE-2021-47940
Download from files <= 1.48 - Arbitrary File Upload
Media
CVE-2021-24577
Coming soon and Maintenance mode <= 3.5.2 - Authenticated Stored Cross-Site Scripting
Media
b13f1fb2-5dbc-4d7d-b4cc-b6dc6804531a
SEO Redirection Plugin – 301 Redirect Manager <= 7.3 - Reflected Cross-Site Scripting
Media
CVE-2021-24737
Comments - wpDiscuz <= 7.3.0 - Authenticated Stored Cross-Site Scripting
Alta
7e199cd3-e2ce-4969-a517-4a9c2a84bf44
Travelpayouts <= 1.0.16 - Cross-Site Request Forgery
Media
CVE-2021-24691
Quiz And Survey Master <= 7.3.1 - Admin+ Stored Cross-Site Scripting
Media
CVE-2021-24711
Software License Manager <= 4.5.0 - Cross-Site Request Forgery leading to Arbitrary Domain Deletion
Media
2678d2c6-055e-462e-99da-bdc81bcc3662
Affiliate Power – Sales Tracking for Affiliate Marketers <= 2.2.0 - Reflected Cross-Site Scripting
Alta
CVE-2021-24546
EditorsKit <= 1.31.5 - Authenticated (Contributor+) Code Injection
Media
CVE-2021-4333
WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation
Media
CVE-2021-24040
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risk
Crítica
CVE-2021-37579
Security check skip in Apache Dubbo
Crítica
CVE-2021-36161
Remote Code Execution in Apache Dubbo
Media
e9b58db6-4059-4923-b1e3-3321cc7d3573
Avada <= 7.4.1 - Stored Cross-Site Scripting
Media
CVE-2021-24576
Easy Accordion <= 2.0.21 - Authenticated Stored Cross-Site Scripting
Media
CVE-2021-24712
Appointment Hour Booking <= 1.3.16 - Cross-Site Scripting
Media
11280431-ee39-45da-909a-e9efc0e6266f
Avada <= 7.4.1 - Reflected Cross-Site Scripting
Alta
CVE-2021-37137
SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way
Alta
CVE-2021-37136
Bzip2Decoder doesn't allow setting size restrictions for decompressed data
Media
CVE-2021-32106
Cross-site scripting in ICEcoder
Media
CVE-2021-31274
Cross-site Scripting in LibreNMS
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.