Media
CVE-2020-26275
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Baja
ghsa-8pfh-mm2g-hmc3
Authenticated Server Side Request Forgery
Baja
ghsa-cq6h-w3mc-57f4
Information exposure via query strings in URL
Baja
ghsa-5q58-x5h2-v5rx
Authenticated Privilege Escalation
Alta
CVE-2020-17526
Incorrect Session Validation in Apache Airflow
Alta
CVE-2020-26263
RSA weakness in tslite-ng
Media
CVE-2020-26258
Server-Side Forgery Request can be activated unmarshalling with XStream
Media
CVE-2020-26259
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
Media
CVE-2020-26227
Cross-Site Scripting in Fluid view helpers
Media
CVE-2020-7789
OS Command Injection in node-notifier
Media
CVE-2021-24126
Envira Gallery Lite <= 1.8.3.2 - Cross-Site Scripting
Media
CVE-2020-26870
Cross-site Scripting in dompurify
Sin evaluar
CVE-2020-26280
OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input valida
Media
CVE-2020-35460
MPXJ path Traversal vulnerability
Media
CVE-2020-35149
Code Injection in mquery
Crítica
CVE-2020-28440
Command Injection in corenlp-js-interface
Media
ac352bb2-f624-4c31-951a-988a0b420635
Simple Social Media Share Buttons <= 3.2.0 - Reflected Cross-Site Scripting
Crítica
CVE-2020-7781
Command injection in connection-tester
Alta
CVE-2020-28458
datatables.net vulnerable to Prototype Pollution due to incomplete fix
Alta
CVE-2020-35489
Contact Form 7 <= 5.3.1 - Arbitrary File Upload via Bypass
Media
CVE-2020-36723
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure
Crítica
CVE-2020-36719
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation
Media
724dead7-0e4a-420d-a5a3-fca578451211
Simple Social Media Share Buttons <= 3.1.1 - Reflected Cross-Site Scripting
Alta
CVE-2020-35943
WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery to Arbitrary File Upload
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.