Media
CVE-2017-5223
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Alta
CVE-2018-19296
Phar object injection in PHPMailer
Alta
CVE-2020-9402
Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suit
Crítica
CVE-2020-9457
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Settings Import to Privilege Escalation
Media
ba98a282-39ee-4a84-b988-ecfc0c4cd297
Brizy - Page Builder < 1.0.114 - Missing Authorization to Settings Update
Alta
b71e6219-09cc-484e-8c48-536797d974ce
WordPress WP-Advanced-Search <= 3.3.3 - Unauthenticated Database Export
Media
CVE-2020-9455
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Email Injection
Crítica
8071f117-c341-45bc-8d6e-8aa5d677d65c
WordPress WP-Advanced-Search <= 3.3.3 - Remote Code Execution
Media
CVE-2020-9458
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Settings and User Data Export
Crítica
CVE-2020-9456
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Privilege Escalation
Alta
CVE-2020-9454
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Cross-Site Request Forgery to Settings Modification
Crítica
CVE-2020-8840
Deserialization of Untrusted Data in jackson-databind
Crítica
CVE-2019-20330
Deserialization of Untrusted Data in jackson-databind
Alta
CVE-2020-5251
Information disclosure in parse-server
Sin evaluar
drupal-contrib-2020-005
drupal/svg_formatter - SA-CONTRIB-2020-005
Media
CVE-2020-36841
WooCommerce Smart Coupons <= 4.6.0 - Unauthenticated Coupon Creation
Crítica
CVE-2020-12073
Responsive Ready Sites Importer <= 2.2.6 - Unprotected AJAX Actions
Alta
CVE-2020-9372
Appointment Booking Calendar <= 1.3.34 - CSV Injection
Media
CVE-2020-9371
Appointment Booking Calendar <= 1.3.34 - Stored Cross-Site Scripting
Alta
CVE-2020-1734
OS Command Injection in ansible
Media
CVE-2020-6858
HTTP Response Splitting in Styx
Alta
9cd2ca03-e644-4bcd-b4b1-a547494fed7d
Booked <= 2.2.5 - Missing Authorization on AJAX Actions
Media
CVE-2019-17569
Potential HTTP request smuggling in Apache Tomcat
Media
CVE-2020-1935
Potential HTTP request smuggling in Apache Tomcat
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.