Crítica
CVE-2019-25141
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Alta
CVE-2019-9574
WP Human Resource Management < 2.2.6 - Sensitive Information Disclosure
Alta
6fb2d9ec-1082-4209-9fc9-6f10ba3a2398
User Login History <= 1.7.0 - SQL Injection via OrderBy
Alta
2c25a344-4876-4ba8-bbc6-d1a32f4b1d08
User Login History <= 1.7.0 - SQL Injection via Order By
Crítica
f6f91414-5035-4cab-81ad-18558fe43500
Better Search < 2.2.3 - SQL Injection
Media
CVE-2018-1324
Apache Commons Compress vulnerable to denial of service due to infinite loop
Media
CVE-2018-1334
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running t
Media
CVE-2018-8024
Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL
Alta
CVE-2015-1772
Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
Alta
CVE-2016-3083
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation
Media
CVE-2017-12625
Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
Alta
CVE-2017-3164
Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core
Crítica
CVE-2019-0192
Critical severity vulnerability that affects org.apache.solr:solr-core
Media
CVE-2019-3778
spring-security-oauth and spring-security-oauth2 Open Redirect vulnerability
Media
CVE-2019-9658
Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle
Media
CVE-2019-9737
Cross-Site Scripting in editor.md
Alta
CVE-2019-15329
Import and export users and customers <= 1.14.0.2 - Cross-Site Request Forgery
Crítica
CVE-2019-25217
SiteGround Optimizer <= 5.0.12 - Missing Authorization
Media
CVE-2019-15328
Import and export users and customers <= 1.14.0.2 - Cross-Site Scripting
Crítica
ce834ae1-e05a-4b0e-9d7f-144669437d70
Caldera Forms Pro < 1.8.2 - Missing Authorization
Crítica
CVE-2019-9618
GraceMedia Media Player <= 1.0 - Local File Inclusion
Alta
CVE-2019-9710
Webargs mishandles concurrent JSON parsing
Crítica
CVE-2018-12426
WP Live Chat Support Pro <= 8.0.06 - Remote Code Execution via unrestricted file upload
Alta
CVE-2019-25152
Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.