Media
CVE-2021-23393
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2021-24405
Easy Cookies Policy <= 1.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Alta
CVE-2021-34675
NEX Forms <= 7.8.7 - Authentication Bypass for PDF Reports
Media
be0ef9d4-abb0-4801-b847-b84912bc6677
BCS BatchLine Book Importer <= 1.5.7 - Arbitrary Product Import/Update
Media
CVE-2021-20734
Welcart e-Commerce <= 2.2.3 - Reflected Cross-Site Scripting
Alta
CVE-2021-23392
Uncontrolled Resource Consumption in locutus
Alta
CVE-2021-32674
Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TA
Media
CVE-2020-26136
Authentication bypass in SilverStripe GraphQL
Media
CVE-2021-28169
Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability
Alta
CVE-2021-34363
The Fuck Arbitrary File Deletion via Path Traversal
Media
CVE-2021-24387
WP Pro Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting
Alta
CVE-2021-32677
Cross-Site Request Forgery (CSRF) in FastAPI
Sin evaluar
CVE-2021-3533
A flaw was found in Ansible if an ansible user sets ANSIBLE_ASYNC_DIR to a subdirectory of a world writable directory. When this occurs, there is a race condition on the managed machine. A malicious,
Crítica
CVE-2021-24375
Motor – Cars, Parts, Service, Equipments and Accessories WooCommerce Store < 3.1.0 - Local File Inclusion
Media
CVE-2021-24432
Advanced AJAX Product Filters <= 1.5.4.6 - Reflected Cross-Site Scripting
Media
CVE-2021-23387
Open Redirect in trailing-slash
Crítica
CVE-2021-25945
Prototype pollution vulnerability in js-extend
Crítica
CVE-2021-29300
Command Injection in @ronomon/opened
Alta
CVE-2021-33502
ReDoS in normalize-url
Media
CVE-2021-33561
Cross-site scripting in Shopizer
Media
CVE-2021-33562
Cross-site scripting in Shopizer
Crítica
CVE-2021-20195
keycloak Self Stored Cross-site Scripting vulnerability
Media
CVE-2020-25724
Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy
Media
CVE-2020-14340
Uncontrolled Resource Consumption in XNIO
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.