Crítica
CVE-2020-7619
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2021-3163
Cross-site Scripting in quill
Media
CVE-2021-28162
Command Injection in @theia/messages
Crítica
CVE-2021-23370
Prototype Pollution in swiper
Media
CVE-2021-23368
Regular Expression Denial of Service in postcss
Media
CVE-2021-28657
Infinite loop in Apache Tika
Alta
CVE-2021-22112
Privilege escalation in spring security
Media
CVE-2021-26074
Broken Authentication in Atlassian Connect Spring Boot
Media
CVE-2021-22113
Incorrect Authorization in Spring Cloud Netflix Zuul
Alta
CVE-2021-29262
Improper permission handling in Apache Solr
Alta
CVE-2021-27905
Server-Side Request Forgery in Apache Solr
Crítica
CVE-2021-29943
Incorrect Authorization in Apache Solr
Media
CVE-2021-23339
HTTP Request Smuggling in akka-http-core
Media
CVE-2021-24308
LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin <= 4.21.0 - Stored Cross-Site Scripting
Alta
CVE-2021-24307
All in One SEO <= 4.1.0.1 - Authenticated Code Injection
Media
CVE-2021-24298
Simple Giveaways <= 2.36.1 - Reflected Cross-Site Scripting
Alta
CVE-2021-24299
ReDi Restaurant Reservation <= 21.0307 - Stored Cross-Site Scripting
Media
CVE-2021-24423
UpdraftPlus WordPress Backup Plugin < 1.6.59 - Stored Cross-Site Scripting
Alta
d99614e6-4543-4594-9a46-71ecc986be45
Wishlist and Compare for WooCommerce <= 1.0.4 - Authorization Bypass
Media
CVE-2020-7735
OS Command Injection in ng-packagr
Alta
CVE-2020-8237
Uncontrolled Resource Consumption in json-bigint
Crítica
CVE-2020-8158
TypeORM vulnerable to MAID and Prototype Pollution
Media
CVE-2020-9281
CKEditor 4.0 vulnerability in the HTML Data Processor
Media
CVE-2019-10806
Improperly Controlled Modification of Dynamically-Determined Object Attributes in vega-util
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.