Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Improper Neutralization of CRLF Sequences in urllib3 library for Python
WordPress Download Manager <= 2.9.93 - Cross-Site Scripting
WordPress Core < 5.1.1 - Cross-Site Request Forgery to Cross-Site Scripting via Comments
SQL Injection in sequelize
Advanced Contact form 7 DB <= 1.6.0 - SQL Injection
Visual CSS Style Editor <= 7.2.0 - Unauthenticated Arbitrary Options Update
Ninja Forms - File Uploads <= 3.0.22 - Unauthenticated Arbitrary File Upload
Apache Airflow vulnerable to CSRF Attacks
Apache Airflow vulnerable to Stored XSS
In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field fo
Yuzo Related Posts <= 5.12.93 - Missing Authorization to Stored Cross-Site Scripting
Cross-Site Scripting in simple-markdown
Materialize-css vulnerable to Cross-site Scripting in tooltip component
Materialize-css vulnerable to Cross-site Scripting in autocomplete component
Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation
High severity vulnerability that affects Microsoft.ChakraCore
High severity vulnerability that affects Microsoft.ChakraCore
High severity vulnerability that affects Microsoft.ChakraCore
High severity vulnerability that affects Microsoft.ChakraCore
High severity vulnerability that affects Microsoft.ChakraCore
Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
High severity vulnerability that affects Microsoft.ChakraCore
High severity vulnerability that affects Microsoft.ChakraCore
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.