Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Easy Digital Downloads (EDD) Twenty-Twelve < 1.1.1 - Cross-Site Scripting
Easy Digital Downloads – htaccess Editor < 1.0.1 - Reflected Cross-Site Scripting
iThemes Builder Depot Theme < 5.0.30 - Reflected Cross-Site Scripting
Easy Digital Downloads – Recommended Products <= 1.2.3.2 - Cross-Site Scripting
All in One SEO <= 2.2.6.1 - Reflected Cross-Site Scripting
Easy Digital Downloads – Simple Shipping <= 2.1.3 - Cross-Site Scripting
RD Download - 0.9.0 and below
Kunena - 3.0.7 and previous
TinyChat Room Spy <= 1.2.8 - Reflected Cross-Site Scripting
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configurati
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.4.95 - SQL Injection
WP-Mon <= 0.5.1 - Arbitrary File Download
Citizen Space <= 1.1 - Reflected Cross-Site Scripting
WordPress Content Slide <= 1.4.2 - Cross-Site Scripting
AJAX Store Locator <= 1.2 - SQL Injection
WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
MiwoFTP < 1.0.6 - Cross-Site Request Forgery leading to Remote Code Execution
Contact Form by ContactMe.com <= 2.3 - Cross-Site Scripting
Profile Builder <= 2.1.3 - Missing Access Controls
MiwoFTP < 1.0.6 - Cross-Site Request Forgery to Arbitrary File Deletion
ECommerce-WD [com_ecommercewd] - maybe earlier
Creative Contact Form [com_creativecontactform] - 2.0.0 and previous
Crayon Syntax Highlighter <= 2.6.10 - Directory Traversal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.