Alta
CVE-2021-39166
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Alta
CVE-2021-39170
Improper Encoding or Escaping of Output in Asset Metadata Component
Media
f4e8ad18-fa25-414c-8a94-9ad9bd3c2e31
XO Event Calendar <= 2.3.6 - Reflected Cross-Site Scripting
Media
CVE-2021-39322
Easy Social Icons <= 3.0.8 – Reflected Cross-Site Scripting
Media
CVE-2021-38314
Gutenberg Template Library & Redux Framework <= 4.2.11 - Missing Authorization to Sensitive Information Disclosure
Media
CVE-2021-33849
Zoho CRM Lead Magnet <= 1.7.2.4 - Cross-Site Scripting
Alta
CVE-2021-38312
Gutenberg Template Library & Redux Framework <= 4.2.1 - Incorrect Authorization Leading to Arbitrary Plugin Installation and Post Deletion
Media
1f38aca5-0d69-421e-a3f2-d12cd593a88a
Easy Social Icons <= 3.0.9 - Reflected Cross-Site Scripting
Baja
CVE-2021-39164
Improper authorisation of members discloses room membership to non-members
Baja
CVE-2021-39163
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
Alta
CVE-2021-37701
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Alta
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Alta
CVE-2021-37713
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
Alta
CVE-2021-39134
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
Alta
CVE-2021-39135
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
Media
CVE-2021-4372
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Stored Cross-Site Scripting
Media
afd67c36-31ec-4e44-bad5-a018834ccfbc
qTranslate X <= 3.4.6.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
8a95633f-b5e1-4a92-b566-90fb05a289ce
Software License Manager <= 4.4.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2021-4353
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Unauthenticated Settings Import/Export
Media
23132298-f1de-4085-a76f-f007b8b7de15
WordPress Geolocation Plugin – CF Geo Plugin <= 7.13.11 - Reflected Cross-Site Scripting
Media
CVE-2021-39320
underConstruction <= 1.18 - Reflected Cross-Site Scripting
Alta
CVE-2021-38623
Improper Resource Shutdown or Release in TYPO3 extension
Media
CVE-2021-36785
Cross-site Scripting in TYPO3 extension
Alta
CVE-2020-22403
Cross-Site Request Forgery in express-cart
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.