Alta
CVE-2020-15246
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Baja
CVE-2020-15249
Stored XSS by authenticated backend user with access to upload files
Baja
CVE-2020-15248
Privilege escalation by backend users assigned to the default "Publisher" system role
Alta
CVE-2020-35235
Secure File Manager < 2.8.2 - Remote Code Execution
Alta
07422361-3c7c-4e3c-bbfb-097c7fe5f2b4
Gutenberg Template and Pattern Library & Redux Framework <= 4.1.20 - Cross-Site Request Forgery
Media
27337cf2-18a0-4f26-a674-3ab2003b4838
WooCommerce Anti-Fraud <= 3.2 - Insecure Direct Object Reference
Alta
CVE-2021-24131
Anti-Spam by CleanTalk < 5.149 - Authenticated SQL Injection
Alta
CVE-2020-22275
Easy Registration Forms <= 2.0.6 - CSV Injection
Alta
CVE-2020-22277
Import and export users and customers <= 1.16.3.5 - CSV injection via a customer's profile
Media
d93006ac-037f-4291-b945-afa38358a037
Contextual Related Posts <= 2.9.3 - Cross-Site Request Forgery
Baja
CVE-2020-26215
Open redirect in Jupyter Notebook
Alta
CVE-2020-26226
Secret disclosure when containing characters that become URI encoded
Alta
CVE-2020-26216
Cross-Site Scripting through Fluid view helper arguments
Sin evaluar
drupal-contrib-2020-038
drupal/miniorange_saml - SA-CONTRIB-2020-038
Alta
Explotada en ataques
CVE-2020-13671
Drupal core - SA-CORE-2020-012
Sin evaluar
drupal-contrib-2020-035
drupal/examples - SA-CONTRIB-2020-035
Media
CVE-2020-28724
Open Redirect in werkzeug
Media
a80c306e-323b-4ab4-955b-4e264625731c
Fancy Product Designer <= 4.5.0 - Stored Cross-Site Scripting
Media
CVE-2020-26225
Reflected XSS with parameters in PostComment
Alta
CVE-2020-26217
XStream can be used for Remote Code Execution
Alta
CVE-2020-8897
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
Media
8a68d036-9109-4bc0-9451-47fa2f9fa628
Paid Memberships Pro <= 2.5.0 - Cross-Site Scripting
Media
8a56c38c-93ba-4e22-92b4-72d79ba8cca4
WP Database Error Manager <= 2.1.6 - Reflected Cross-Site Scripting
Baja
ghsa-hrfh-fp4x-crrq
Persistent XSS in newsletter module in Shopware
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.