Crítica
CVE-2019-19634
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Alta
Explotada en ataques
CVE-2020-11738
Duplicator < 1.3.28 - Directory Traversal
Media
CVE-2019-10772
Sanitizer bypass in svg-sanitizer
Media
CVE-2020-36854
Async JavaScript <= 2.19.07.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2020-9459
Modern Events Calendar Lite <= 5.1.6 - Missing Authorization to Stored Cross-Site Scripting and Settings Update
Alta
CVE-2020-36853
10WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change
Media
CVE-2020-1932
An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users' information, including hashed pas
Alta
CVE-2020-36731
Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update
Media
CVE-2020-9019
WPJobBoard <= 5.5.3 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2020-20406
Elementor Website Builder <= 2.9.2 - Stored Cross-Site Scripting
Media
CVE-2020-9334
Envira Photo Gallery <= 1.7.6 - Authenticated Stored Cross-Site Scripting
Alta
CVE-2020-9392
Pricing Table by Supsystic <= 1.8.1 - Missing Authorization on AJAX Actions
Alta
CVE-2020-9393
Pricing Table by Supsystic <= 1.8.1 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2019-19134
Hero Maps Premium <= 2.2.2 - Reflected Cross-Site Scripting
Media
CVE-2020-9335
Photo Gallery by 10Web <= 1.5.45 - Multiple Cross-Site Scripting Issues
Alta
CVE-2020-9394
Pricing Table by Supsystic <= 1.8.1 - Cross-Site Request Forgery to Cross-Site Scripting and Setting Changes
Alta
ghsa-9r27-994c-4xch
discord-html not escaping HTML code blocks when lacking a language identifier
Media
CVE-2019-19325
Reflected XSS in SilverStripe
Alta
CVE-2020-5245
Remote Code Execution (RCE) vulnerability in dropwizard-validation
Alta
af2d004f-fa9e-4e26-a1e3-03fb31cb95c4
Ultimate Membership Pro <= 8.6.1 - Cross-Site Request Forgery
Alta
9ecaaa86-9de1-4b90-b6cf-885621cffb19
Ultimate Membership Pro <= 8.6 - Cross-Site Request Forgery
Alta
CVE-2020-8819
CardGate Payments for WooCommerce <= 3.1.15 - Lack of Origin Validation
Alta
CVE-2020-7238
HTTP Request Smuggling in Netty
Crítica
CVE-2019-20444
HTTP Request Smuggling in Netty
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.