Crítica
CVE-2020-10817
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
e9b28209-498f-4319-be87-3f54c64d9ccd
CM Pop-Up banners <= 1.4.10 - Authenticated Stored Cross-Site Scripting
Media
CVE-2020-14010
Xenon - Bootstrap Admin Theme with AngularJS <= 1.3 - Reflected Cross-Site Scripting
Media
CVE-2020-11512
IMPress for IDX Broker <= 2.6.1 - Authenticated Stored Cross-Site Scripting
Alta
CVE-2020-9514
IMPress for IDX Broker <= 2.6.1 - Authenticated Arbitrary Post Creation, Modification, and Deletion
Baja
CVE-2020-37289
Vyper interfaces returning integer types less than 256 bits can be manipulated if uint256 is used
Sin evaluar
drupal-contrib-2020-008
drupal/svg_image - SA-CONTRIB-2020-008
Crítica
CVE-2020-5280
Local file inclusion vulnerability in http4s
Alta
CVE-2020-5261
Missing Token Replay Detection in Saml2 Authentication services for ASP.NET
Crítica
CVE-2020-11514
Rank Math SEO <= 1.0.40.2 - Privilege Escalation via Unprotected REST API Endpoint
Alta
CVE-2020-11515
Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint
Sin evaluar
694
acymailing - Other
Media
CVE-2020-6816
Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag
Media
CVE-2020-6802
XSS in Bleach when noscript and raw tag whitelisted
Alta
ghsa-vg44-fw64-cpjx
Incorrect Account Used for Signing
Media
CVE-2020-10684
Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible
Alta
CVE-2020-12076
Data Tables Generator by Supsystic <= 1.9.91 - Cross-Site Request Forgery
Media
CVE-2020-5252
Malicious package may avoid detection in python auditing
Media
CVE-2020-36835
Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure
Media
CVE-2020-12075
Data Tables Generator by Supsystic <= 1.9.91 - Missing Authorization on AJAX Actions
Baja
693
BadBot Protection id 14294
Crítica
CVE-2020-10799
SVGlib Vulnerable to XXE Attacks
Crítica
CVE-2022-0888
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
Media
CVE-2023-23793
Read More Without Refresh <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.