Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Incorrect Privilege Assignment in Jinja2
EasyBlog pre
Login rebuilder < 1.2.0 - Cross-Site Request Forgery
iMember360is 3.8.012 - 3.9.001 - Cross-Site Scripting
Bonuspressx (All Versions) - Cross-Site Scripting
OpenStack Nova host data leak to vm instance in rescue mode
WP-Property – WordPress Powered Real Estate and Property Management < 1.38.4 - Information Disclosure
Photo Gallery by 10Web <= 1.2.41 - Cross-Site Request Forgery
Prostore < 1.1.3 - Open Redirect
Profile Builder – User Profile & User Registration Forms Plugin < 1.1.60 - Authentication Bypass
Search Everything <= 8.1 - Cross-Site Request Forgery
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initiali
WP Affiliate Platform <= 6.3.8 - Reflected Cross-Site Scripting
TinyMCE Color Picker < 1.2 - Cross-Site Request Forgery
Acumbamail < 1.0.4.1 - Sensitive Information Disclosure
NextCellent Gallery < 1.9.18 - Stored Cross-Site Scripting
iMember360 < 3.9.001 - Missing Authorization and Sensitive Data Exposure
TinyMCE Color Picker <= 1.1 - Missing Authorization
Keyword Strategy Internal Links <= 2.0 - Reflected Cross-Site Scripting
iMember360 3.8.012 - 3.9.001 - Missing Authorization
Contact Bank – Contact Form Builder for WordPress <= 2.0.19 - Cross-Site Scripting
WP Easybooking <= 1.0.3 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.