Alta
CVE-2019-15326
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Alta
CVE-2019-25147
Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link
Crítica
CVE-2019-15839
Sina Extension for Elementor < 2.2.1 - Local File Inclusion
Alta
CVE-2019-5979
Personalized WooCommerce Cart Page <= 2.4 - Cross-Site Request Forgery
Baja
ghsa-4vr3-9v7h-5f8v
Low severity vulnerability that affects Gw2Sharp
Alta
d0999244-4097-4e8c-8f7e-4accd7727d69
Dropshix < 4.0.14 - Authorization Bypass
Media
8b089114-b403-4e42-a578-c1f3b100978f
Cookieless Backend Server Tracking for Google Analytics – WordPress Plugin < 1.2.1 - Cross-Site Scripting
Alta
CVE-2019-15841
Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery allowing Option Update
Alta
1ed98565-3f86-46c0-a696-13d678f2d523
Rank Math SEO <= 1.0.26 - Cross-Site Scripting
Alta
CVE-2019-15840
Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery
Media
edd1396b-02f6-4292-82df-76c5eeecfe20
Facebook Chat Plugin <= 1.2 - Cross-Site Request Forgery to Site Settings Changes
Crítica
CVE-2019-12855
Improper Certificate Validation in Twisted
Media
cad5274f-0d73-425d-bdfb-478c77d55d6c
WordPress Download Manager <= 2.9.96 - Cross-Site Scripting
Alta
CVE-2019-10270
Ultimate Member <= 2.0.39 - Privilege Escalation
Alta
dae2d028-6976-468a-9e93-ec712887d657
LionScripts: IP Blocker Lite <= 10.4 - Cross-Site Request Forgery to Arbitrary File Upload
Media
CVE-2019-10271
Ultimate Member <= 2.0.39 - Unauthorized Profile Modification
Alta
ghsa-68gr-cmcp-g3mj
Directory Traversal in lactate
Media
ghsa-v2p6-4mp7-3r9v
Regular Expression Denial of Service in underscore.string
Crítica
ghsa-4vmm-mhcq-4x9j
Sandbox Bypass Leading to Arbitrary Code Execution in constantinople
Crítica
ghsa-4qhx-g9wp-g9m6
Failure to sanitize quotes which can lead to sql injection in squel
Media
CVE-2019-10157
Forced Logout in keycloak-connect
Alta
ghsa-74cr-77xc-8g6r
Prototype Pollution in @apollo/gateway
Alta
CVE-2019-5442
XML Entity Expansion in Pippo
Media
CVE-2019-11269
Open Redirect in Spring Security OAuth
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.