Alta
CVE-2020-11971
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
ghsa-9vxv-wpv4-f52p
Information leakage in Error Handler
Media
ghsa-f6p7-8xfw-fjqq
Authenticated Stored XSS in Administration
Crítica
CVE-2021-29504
Improper Certificate Validation in WP-CLI framework
Media
CVE-2021-29506
Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service.
Crítica
CVE-2021-29508
Insecure deserialization in Wire
Media
ghsa-7h5v-85w9-pq6c
Denial of service (via resource exhaustion) due to improper input validation in third-party identifier endpoint
Media
CVE-2021-24421
WP JobSearch <= 1.7.3 - Stored Cross-Site Scripting
Alta
CVE-2021-24340
WP Statistics <= 13.0.7 - Unauthenticated SQL Injection
Alta
CVE-2021-24337
Video Embed <= 1.0 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2021-24336
FlightLog <= 3.0.2 - Authenticated (Editor+) SQL Injection
Alta
CVE-2021-29505
XStream is vulnerable to a Remote Command Execution attack
Alta
CVE-2021-32620
XWiki users registered with email verification can self re-activate their disabled accounts
Alta
CVE-2021-32621
Script injection without script or programming rights through Gadget titles
Media
CVE-2020-7765
Uncontrolled Resource Consumption in firebase
Alta
CVE-2020-28268
Prototype pollution in controlled-merge
Media
CVE-2020-7680
Cross-site Scripting in docsify
Media
CVE-2020-7696
Credential leak in react-native-fast-image
Crítica
CVE-2020-7684
Path traversal in rollup-plugin-serve
Alta
CVE-2020-8186
Injection and Command Injection in devcert
Media
CVE-2020-7690
Cross-site scripting in jspdf
Media
CVE-2020-8176
Cross-site scripting in @shopify/koa-shopify-auth
Media
CVE-2020-15500
Cross-site scripting in TileServer GL
Media
CVE-2020-7688
OS Command Injection in mversion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.