Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Advanced Woo Search <= 1.68 - Cross-Site Scripting
Blog2Social: Social Media Auto Post & Scheduler <= 5.0.2 - Reflected Cross-Site Scripting
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload
RSForm! Pro - Other
Arbitrary File Overwrite in tar
Improper Input Validation in tar-fs
Cross-site Scripting in NodeBB
Blog Designer <=1.8.10 - Unauthenticated Stored Cross-Site Scripting
Exposure of Sensitive Information to an Unauthorized Actor in Keycloak
My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting
RSVPMaker <= 6.1.9 - SQL Injection
Print My Blog <= 1.6.6 - Server-Side Request Forgery
WooCommerce Checkout Manager <= 4.2.6 - Unauthenticated Arbitrary Media Deletion
Phoca Gallery - Other
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent.
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory.
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted config
Cross-site Scripting in Apache Zeppelin
Session Fixation in Apache Zeppelin
Improper Authentication in Apache Zeppelin
JobCareer | Job Board Responsive WordPress Theme <= 2.5.1 - Stored Cross-Site Scripting
WP Database Backup < 5.2 - Unauthenticated OS Command Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.