Media
CVE-2021-24569
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Alta
CVE-2021-39316
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.45 - Directory Traversal
Media
CVE-2021-4445
Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
Media
ba88a1f5-9ebf-4899-81b3-e65587ae2fe2
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting
Media
834ff44a-4259-49a5-bad3-26fce393fb98
Docket Cache – Object Cache Accelerator <= 21.08.01 - Reflected Cross-Site Scripting
Media
CVE-2021-24670
CoolClock <= 4.3.4 - Authenticated Stored Cross-Site Scripting
Media
57be47e2-9aac-42bd-af6a-5060d2f86449
User Activity Log <= 1.4.6 - Reflected Cross Site Scripting
Media
44cbaa25-7e91-4b2e-81c4-ba1d7ba02350
Multiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting
Media
CVE-2021-24610
TranslatePress <= 2.0.8 - Authenticated Stored Cross-Site Scripting
Media
CVE-2021-24633
Countdown Block <= 1.1.1 - Missing Authorization
Media
001e066f-6add-4426-8cd7-32229a9188d1
User Activity Log <= 1.4.6 - Reflected Cross-Site Scripting
Media
CVE-2021-24681
Duplicate Page <= 4.4.1 Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2020-19002
Mezzanine Cross Site Scripting (XSS) vulnerability
Crítica
CVE-2020-19001
Command Injection in Simiki
Media
CVE-2020-19000
Cross Site Scripting (XSS) in Simiki
Media
eaf17a09-3e35-4df8-acb9-7829942597c6
Woffice CRM <= 4.0.1 - Authorization Bypass
Media
cc1e9778-2860-4e3c-a2e4-28f10d585fed
CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
Media
CVE-2021-24661
PostX Gutenberg Blocks Saved Templates Addon <= 2.4.9 - Private Content Disclosure
Media
CVE-2021-24660
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Stored Cross-Site Scripting
Media
CVE-2021-24659
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2021-39159
remote code execution via git repo provider
Alta
CVE-2021-39160
Code injection in nbgitpuller
Sin evaluar
drupal-contrib-2021-026
drupal/webform - SA-CONTRIB-2021-026
Media
CVE-2021-3728
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.