Alta
CVE-2021-24123
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.601
Alta
CVE-2021-24377
Autoptimize <= 2.7.7 - Race Condition leading to Remote Code Execution
Media
CVE-2021-24378
Autoptimize <= 2.7.7 - Unsafe File Upload to Cross-Site Scripting
Crítica
CVE-2021-24376
Autoptimize <= 2.7.7 - Arbitrary File Upload (and Remote Code Execution) via Import Settings
Alta
CVE-2020-26149
Sensitive data exposure in NATS
Media
ghsa-5822-pw57-vv37
XSS vulnerability when listing users on add & modify server pages.
Media
CVE-2020-15241
Cross-Site Scripting in ternary conditional operator
Media
CVE-2020-15242
Open Redirect in Next.js versions
Media
CVE-2012-5784
Man-in-the-middle attack in Apache Axis
Alta
e3a8f554-7cb6-40b7-b83c-819e7785058a
HyperComments <= 1.2.2 - Arbitrary File Deletion
Media
CVE-2020-28650
WPBakery Page Builder for WordPress <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Baja
CVE-2020-15239
Directory Traversal vulnerability in GET/PUT allows attackers to Disclose Information or Write Files via a crafted GET/PUT request
Baja
CVE-2020-15215
Context isolation bypass in Electron
Alta
CVE-2020-15174
Unpreventable top-level navigation
Alta
CVE-2020-26596
Elementor Pro <= 3.0.5 - Authenticated Remote Code Execution in Dynamic OOO Widget
Alta
9f9e5212-caed-46db-bbf2-81c4df88439f
LearnPress – WordPress LMS Plugin <= 3.2.7.2 - SQL Injection
Alta
CVE-2020-15170
Potential access control security issue in apollo-adminservice
Baja
ghsa-f366-4rvv-95x2
Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration
Media
CVE-2020-6506
Android WebView Universal Cross-site Scripting
Alta
CVE-2020-15227
Potential Remote Code Execution vulnerability
Alta
CVE-2020-24807
File restriction bypass in socket.io-file
Crítica
CVE-2020-26511
WPO365 | LOGIN <= 11.6 - Authentication Bypass
Baja
CVE-2020-15228
Environment Variable Injection in GitHub Actions
Crítica
ghsa-mfc2-93pr-jf92
Malicious code in `loadyaml`
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.