Media
CVE-2021-21377
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Alta
CVE-2021-21376
OMERO.web exposes some unnecessary session information in the page
Media
CVE-2021-21370
Cross-Site Scripting in Content Preview (CType menu)
Media
CVE-2021-21359
Denial of Service in Page Error Handling
Media
CVE-2021-21358
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form
Alta
CVE-2021-21357
Broken Access Control in Form Framework
Alta
CVE-2021-21355
Unrestricted File Upload in Form Framework
Media
CVE-2021-21340
Cross-Site Scripting in Content Preview
Media
CVE-2021-21339
Cleartext storage of session identifier
Media
CVE-2021-21338
Open Redirection in Login Handling
Media
CVE-2021-24213
GiveWP 2.4.0 - 2.9.7 - Reflected Cross Site Scripting
Crítica
CVE-2021-24215
Controlled Admin Access <= 1.5.1 - Improper Access Control & Privilege Escalation
Media
CVE-2021-24891
Elementor Website Builder <= 3.4.7 - DOM-based Cross-Site Scripting
Media
CVE-2021-21351
XStream is vulnerable to an Arbitrary Code Execution attack
Media
CVE-2021-21350
XStream is vulnerable to an Arbitrary Code Execution attack
Media
CVE-2021-21349
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Media
CVE-2021-21348
XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)
Media
CVE-2021-21347
XStream is vulnerable to an Arbitrary Code Execution attack
Media
CVE-2021-21346
XStream is vulnerable to an Arbitrary Code Execution attack
Media
CVE-2021-21345
XStream is vulnerable to a Remote Command Execution attack
Media
CVE-2021-21344
XStream is vulnerable to an Arbitrary Code Execution attack
Media
CVE-2021-21343
XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights
Media
CVE-2021-21342
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Alta
CVE-2021-21341
XStream can cause a Denial of Service.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.