Alta
CVE-2021-48018
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Baja
ghsa-xh2p-7p87-fhgh
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
Media
CVE-2021-24609
Mapa Politico España < 3.7.0 - Stored Cross-Site Scripting
Alta
b15b10a4-04fd-4860-9cc9-cefcdbbbf507
User Rights Access Manager <= 1.0.7 - Access Restriction Bypass
Alta
CVE-2019-0820
Regular Expression Denial of Service in System.Text.RegularExpressions
Alta
CVE-2021-24606
Availability Calendar < 1.2.1 - SQL Injection
Media
58b8e6f5-5cf8-4dbb-89e9-69266bdc1a30
WP Customize Login <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
Alta
CVE-2021-32803
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Media
CVE-2021-32796
Misinterpretation of malicious XML input
Alta
ghsa-6cj2-92m5-7mvp
Improperly Controlled Modification of Object Prototype Attributes
Media
CVE-2021-24604
Availability Calendar <= 1.2.1 - Stored Cross-Site Scripting
Alta
CVE-2021-32806
URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
Media
CVE-2020-9472
Unrestricted Upload of File with Dangerous Type in Umbraco CMS
Media
CVE-2020-8867
Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard
Alta
CVE-2021-23407
Path Traversal in elFinder.Net.Core
Alta
CVE-2020-1180
Remote code execution in ChakraCore
Alta
CVE-2020-1172
Remote code execution in ChakraCore
Alta
CVE-2020-1057
Remote code execution in ChakraCore
Crítica
CVE-2020-27998
Missing Authorization in FastReport
Alta
CVE-2020-0768
Out-of-bounds write in ChakraCore
Alta
CVE-2020-17048
Out-of-bounds Write in ChakraCore
Alta
CVE-2020-17054
Out-of-bounds Write in ChakraCore
Crítica
CVE-2020-35476
OS Command Injection in OpenTSDB
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.