Alta
CVE-2020-1920
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Alta
CVE-2019-25050
netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and
Alta
fc62adbf-1f04-46b2-9ae9-aac3dbce8759
WP SEO TDK <= 2.1.2 - Missing Authorization to Stored Cross-Site Scripting
Alta
CVE-2021-24497
Giveaway <= 1.2.2 - Authenticated (Admin+) SQL Injection
Media
CVE-2021-24547
KN Fix Your Title <= 1.0.1 - Stored Cross-Site Scripting
Media
5653f1aa-06da-4208-afa2-19ef31b8be2f
Google Language Translator <= 6.0.9 - Authenticated Cross-Site Scripting
Alta
CVE-2021-24602
HM Multiple Roles <= 1.2 - Privilege Escalation via Arbitrary Role Change
Media
11e97adc-b402-4d82-ae39-4dccbd70bcf2
Elementor Addon Elements <= 1.11.7 - Cross-Site Request Forgery
Media
0efff314-b14f-4af4-b225-ba7e41d01b2e
Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting
Media
CVE-2021-3647
URIjs Vulnerable to Hostname spoofing via backslashes in URL
Media
CVE-2021-28114
Cross-site Scripting in Froala WYSIWYG Editor
Alta
CVE-2021-32770
Basic-auth app bundle credential exposure in gatsby-source-wordpress
Media
CVE-2021-34429
Encoded URIs can access WEB-INF directory in Eclipse Jetty
Media
fd12ce4a-585d-4e26-88fb-1ab9dcc8727d
RestroPress <= 2.8.3 - Missing Authorization
Media
CVE-2021-24535
Light Messages <= 1.0 - Authenticated (Admin+) Cross-Site Scripting
Media
CVE-2021-24380
Shantz WordPress QOTD <= 1.2.2 - Cross-Site Request Forgery
Media
CVE-2021-24534
PhoneTrack Meu Site Manager <= 0.1 - Cross-Site Scripting
Media
CVE-2021-24540
Wonder Video Embed <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2021-24466
Verse-O-Matic <= 4.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2021-24536
Custom Login Redirect <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
b7d84cb9-175f-433c-ab5c-d89621847b4d
Photo Gallery by 10Web <= 1.5.78 - Stored Cross-Site Scripting via Uploaded SVG
Media
CVE-2021-24519
VikRentCar Car Rental Management System < 1.1.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
80c9f2e3-afdc-4ba2-a1ef-4c1d166d0757
RestroPress <= 2.8.2 - Cross-Site Request Forgery to Cart Manipulation
Media
CVE-2021-34676
NEX-Forms <= 7.8.7 Authorization Bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.