Media
CVE-2019-14864
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Crítica
CVE-2019-14859
Improper Verification of Cryptographic Signature in Pure-Python ECDSA
Alta
e203fc8f-fc57-4918-8ef2-3ba6ae979d40
WooCommerce Conversion Tracking <= 2.0.4 - Cross-Site Request Forgery and Cross-Site Scripting
Media
CVE-2019-20204
Postie <= 1.9.40 - Cross-Site Scripting
Media
CVE-2019-20203
Postie <= 1.9.40 - Post Submission Spoofing & Stored Cross-Site Scripting
Alta
CVE-2020-5244
BuddyPress <= 5.1.1 - Sensitive Information Disclosure
Alta
e46ff294-0be1-47c1-8c21-f6242c6f832a
Import and export users and customers 1.15 - Sensitive Data Exposure
Crítica
Explotada en ataques
CVE-2019-10758
Remote Code Execution Vulnerability in NPM mongo-express
Alta
CVE-2019-25149
Gallery Images Ape <= 2.0.6 - Authenticated Plugin Deactivation
Media
CVE-2019-20210
CTHthemes CityBook Theme < 2.3.4, TownHub Theme < 1.0.6, EasyBook Theme < 1.2.2 - Cross-Site Scripting
Media
CVE-2019-25143
GDPR Cookie Compliance <= 4.0.2 - Missing Authorization
Alta
CVE-2019-20211
CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 - Stored Cross-Site Scripting
Media
3ec4e870-dd0f-4ec5-a03c-da47e6c1ef61
bbPress Login Register Links On Forum Topic Pages <= 2.7.5 - Cross-Site Request Forgery
Alta
CVE-2019-20212
CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 - Stored Cross-Site Scripting
Media
CVE-2019-20209
CTHthemes CityBook < 2.3.4, TownHub < 1.0.6, EasyBook < 1.2.2 Themes - Authenticated Post Deleition via IDOR
Sin evaluar
CVE-2019-20008
In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page.
Alta
CVE-2019-12418
Insufficiently Protected Credentials in Apache Tomcat
Alta
CVE-2019-17563
In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack
Crítica
CVE-2019-19919
Prototype Pollution in handlebars
Media
CVE-2019-16789
HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers (Follow-up)
Alta
ghsa-m5ff-3wj3-8ph4
HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Alta
f796b282-0012-4d86-914d-72c7707dce42
bbPress Members Only <= 1.2.1 - Cross-Site Request Forgery
Media
766b5c62-0701-47d5-9839-445c2654d3e0
WP Accessibility < 1.7.0 - Authenticated Stored Cross-Site Scripting
Alta
4270a5c2-abc0-4505-9683-030dc08a462d
Featured Image from URL <= 2.7.7 - Missing Authorization on REST API routes
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.