Media
2ee837fd-a41e-44f2-81e8-258a7d8547bd
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.406
Alta
02ac8b9e-bc59-4c46-9f9c-23e3b6ae615c
Picture Factory (Unspecified Versions) - Cross-Site Scripting
Media
CVE-2012-4242
MF Gig Calendar <= 0.9.4.1 - Cross-Site Scripting
Media
CVE-2011-5193
WHOIS <= 1.4.2.4 - Cross-Site Scripting
Alta
CVE-2012-10016
Simple Download Button Shortcode <= 1.0 - Information Disclosure via Arbitrary File Downloads
Media
6aab08c1-20db-46a2-b93a-d864bb57bf4d
WP-TopBar <= 4.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Alta
CVE-2012-4921
DVS Custom Notification <= 1.0.1 - Cross-Site Request Forgery
Media
CVE-2012-4768
Download Monitor <= 3.3.5.8 - Reflected Cross-Site Scripting
Media
CVE-2012-3383
WordPress Core < 3.4.2 - Cross-Site Scripting
Baja
CVE-2012-4422
WordPress Core < 3.4.2 - Missing Authorization Checks
Media
CVE-2012-4421
WordPress Core < 3.4.2 - Missing Authorization Checks on create_post
Alta
CVE-2012-3542
OpenStack Keystone Allows Remote User Account Creation
Sin evaluar
CVE-2012-3540
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a U
Crítica
7c6be4e1-1b24-4a95-a6fd-3196f47796a6
TDO Mini Forms <= 0.13.9 - Arbitrary File Upload
Alta
beb47081-ad9c-4ecb-bbcd-2ae916e55baf
Media File Renamer – Auto & Manual Rename <= 5.2.5 - Missing Authorization Checks
Alta
db6995d1-8060-40cb-9e35-2baea4e39072
Floating Tweets <= 1.0.1 - Reflected Cross-Site Scripting
Crítica
a2f8c71d-ad19-4265-8d33-3b0e7dbbf4c2
Monsters Editor for WP Super Edit <= 1.1 - Arbitrary File Upload
Crítica
70e29aa5-6f36-498f-ad85-f9d9ab8d9bcb
sem-wysiwyg <= 1.0 - Arbitrary File Upload
Crítica
4db1ee2b-d8ed-4f2a-8de5-81abeafa2f9d
Rich Widget <= 0.2.4 - Arbitrary File Upload
Media
d2137662-d328-4da7-986a-341ff1bdca63
iThemes Security < 3.4.4 - Cross-Site Scripting
Media
CVE-2012-4226
Quick Post Widget <= 1.9.1 - Multiple Cross-Site Scripting
Media
CVE-2012-2572
ThreeWP Email Reflector < 1.16 - Cross-Site Scripting
Alta
CVE-2012-2580
Postie < 1.4.10 - Cross-Site Scripting
Alta
CVE-2012-2583
Mini Mail Dashboard Widget < 1.43 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.