Crítica
CVE-2020-5262
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Alta
7e4e1afd-604d-45c2-ab6b-fa9ccac0c361
All Import Pro Plugin < 4.1.2 - SQL injection
Sin evaluar
drupal-core-2020-001
Drupal core - SA-CORE-2020-001
Alta
CVE-2019-10682
django-nopassword stores secrets in cleartext
Media
32ac72f7-6bcc-4b5d-925a-9c5fc0c1f065
Advanced Ads <= 1.17.3 - Reflected Cross-Site Scripting
Media
CVE-2020-13644
Accordion <= 2.2.8 - Unprotected AJAX Action to Stored/Reflected Cross-Site Scripting
Alta
08115f30-f38b-4c13-803e-5de873f83a17
Custom Post Type UI <= 1.7.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Alta
CVE-2019-19135
Insufficient Nonce Validation in Eclipse Milo Client
Media
CVE-2020-1740
Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible
Baja
CVE-2020-1738
Argument Injection in Ansible
Media
CVE-2020-1736
Incorrect Permission Assignment for Critical Resource in Ansible
Media
CVE-2020-1735
Path Traversal in Ansible
Media
CVE-2020-1753
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Media
e91e6101-bd30-4cf1-9a39-23218c3bff6f
Newsletter <= 6.5.3 - CSV Injection
Alta
CVE-2020-7916
LearnPress <= 3.2.6.6 - Privilege Escalation
Crítica
CVE-2020-10594
Django Rest Framework jwt allows obtaining new token from notionally invalidated token
Crítica
CVE-2020-10571
Potential buffer overflow in psd-tools
Media
CVE-2020-5240
2FA bypass through deleting devices in wagtail-2fa
Alta
CVE-2020-5256
Remote Code Execution Through Image Uploads in BookStack
Crítica
CVE-2020-10564
WordPress File Upload <= 4.12.2 - Directory Traversal to Remote Code Execution
Alta
CVE-2020-36842
Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2020-36704
Fruitful < 3.8.2 - Stored Cross-Site Scripting
Baja
CVE-2020-1739
Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Crítica
CVE-2020-10109
HTTP Request Smuggling in Twisted
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.