Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Download Manager <= 3.1.17 - Missing Authorization
Malicious users could abuse Sydent to control the content of invitation emails
SSRF in Sydent due to missing validation of hostnames
Sydent vulnerable to denial of service attack via memory exhaustion
Sydent DoS (via resource exhaustion) due to improper input validation
WordPress Core < 5.7.1 - Sensitive Information Disclosure
WordPress Core < 5.7.1 - XXE Injection
Clever Addons for Elementor <=2.0.15 - Stored Cross-Site Scripting
User Rights Access Manager <= 1.0.3 - Missing Authorization
SQL Injection via in django-debug-toolbar
BuddyPress <= 7.2.1 - Missing Authorization to Unauthorized Group Access
Easy Digital Downloads <= 2.10.2 - Cross-Site Request Forgery
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation
Fitness Calculators <= 1.9.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
BuddyPress <= 7.2.1 - Missing Authorization to Private Post Activity
BuddyPress <= 7.2.1 - Insufficient Privilege De-escalation
BuddyPress <= 7.2.1 - Missing Authorization to Group Creation
Out-of-bounds Write in Chakra
Authenticated path traversal in Umbraco CMS
Incorrect permission enforcement in UmbracoCms
Improper Input Validation in klona
Remote code execution in mongo-express
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.