Media
CVE-2021-24418
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2021-24331
Smooth Scroll Page Up/Down Buttons <= 1.3 - Cross-Site Scripting
Media
CVE-2021-28168
Local information disclosure via system temporary directory
Media
ghsa-jgpv-4h4c-xhw3
Uncontrolled Resource Consumption in pillow
Alta
CVE-2021-31607
Command Injection in SaltStack Salt
Media
CVE-2021-24286
Redirect 404 to parent < 1.3.1 - Reflected Cross-Site Scripting
Media
CVE-2021-24219
Multiple Thrive Themes and Plugins (Various Versions) - Arbitrary Options Update
Media
CVE-2021-24287
Select All Categories and Taxonomies, Change Checkbox to Radio Buttons < 1.3.2 - Reflected Cross-Site Scripting
Media
CVE-2021-24428
Rss for Yandex Turbo <= 1.30 - Admin+ Stored Cross-Site Scripting
Alta
Explotada en ataques
CVE-2020-36193
Directory Traversal in Archive_Tar
Media
CVE-2020-26939
Observable Differences in Behavior to Error Inputs in Bouncy Castle
Alta
CVE-2020-35217
Cross-Site Request Forgery in Vert.x-Web framework
Media
CVE-2020-9447
Cross-site Scripting in GwtUpload
Media
CVE-2020-13954
Cross-site scripting in Apache CXF
Media
CVE-2020-7744
Remote Code Execution and download tracking in Mintegral SDK
Alta
CVE-2020-26945
"Deserialization errors in MyBatis"
Media
CVE-2020-13955
Missing Authentication for Critical Function in Apache Calcite
Crítica
CVE-2020-17510
Authentication bypass in Apache Shiro
Crítica
CVE-2021-29459
XSS Cross Site Scripting
Media
ghsa-6hgr-2g6q-3rmc
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
Media
CVE-2021-31408
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
Crítica
CVE-2021-21427
Backport for CVE-2021-21024 Blind SQLi from Magento 2
Crítica
CVE-2021-21426
Fixes a bug in Zend Framework's Stream HTTP Wrapper
Alta
CVE-2017-18924
Code Injection in oauth2-server
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.