Alta
CVE-2021-28931
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
CVE-2020-23700
Cross-site scripting in LavaLite-CMS
Alta
CVE-2021-22004
Improper Authentication in SaltStack Salt
Alta
CVE-2021-21996
Exposure of Resource to Wrong Sphere in salt
Alta
CVE-2021-23404
Cross-Site Request Forgery in sqlite-web
Media
CVE-2021-36870
WP Google Maps <= 8.1.12 - Authenticated Stored Cross-Site Scripting
Alta
CVE-2021-38324
SP Rental Manager <= 1.5.3 - Unauthenticated SQL Injection
Media
CVE-2021-38319
More From Google <= 0.0.2 - Reflected Cross-Site Scripting
Media
CVE-2021-38316
WP Academic People List <= 0.4.1 - Reflected Cross-Site Scripting
Media
CVE-2021-36871
WP Google Maps Pro <= 8.1.11 - Authenticated Stored Cross-Site Scripting
Media
CVE-2021-38317
Konnichiwa! Membership <= 0.8.3 Reflected Cross-Site Scripting
Media
CVE-2021-38325
User Activation Email <= 1.3.0 - Reflected Cross-Site Scripting
Crítica
CVE-2021-39199
Unsafe defaults in `remark-html`
Crítica
CVE-2021-3766
objection.js Prototype Pollution vulnerability
Media
CVE-2021-23439
Cross-site Scripting in file-upload-with-preview
Media
CVE-2021-39194
Improper Handling of Missing Values in kaml
Crítica
ghsa-2c83-wfv3-q25f
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in ZMarkdown
Alta
CVE-2021-39177
User impersonation due to incorrect handling of the login JWT
Crítica
CVE-2021-47986
Incorrect version tags linked to external repository
Alta
CVE-2021-3757
Prototype Pollution in immer
Alta
CVE-2020-13929
Authentication bypass in Apache Zeppelin
Crítica
CVE-2019-10095
Bash command injection in Apache Zeppelin
Media
CVE-2021-27578
Cross-site Scripting in Apache Zeppelin
Alta
ghsa-jpwx-ffjq-wr4w
Content object state fetch functions open to SQL injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.