Baja
CVE-2012-4422
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2012-4421
WordPress Core < 3.4.2 - Missing Authorization Checks on create_post
Alta
CVE-2012-3542
OpenStack Keystone Allows Remote User Account Creation
Sin evaluar
CVE-2012-3540
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a U
Crítica
7c6be4e1-1b24-4a95-a6fd-3196f47796a6
TDO Mini Forms <= 0.13.9 - Arbitrary File Upload
Alta
beb47081-ad9c-4ecb-bbcd-2ae916e55baf
Media File Renamer – Auto & Manual Rename <= 5.2.5 - Missing Authorization Checks
Alta
db6995d1-8060-40cb-9e35-2baea4e39072
Floating Tweets <= 1.0.1 - Reflected Cross-Site Scripting
Crítica
a2f8c71d-ad19-4265-8d33-3b0e7dbbf4c2
Monsters Editor for WP Super Edit <= 1.1 - Arbitrary File Upload
Crítica
70e29aa5-6f36-498f-ad85-f9d9ab8d9bcb
sem-wysiwyg <= 1.0 - Arbitrary File Upload
Crítica
4db1ee2b-d8ed-4f2a-8de5-81abeafa2f9d
Rich Widget <= 0.2.4 - Arbitrary File Upload
Media
d2137662-d328-4da7-986a-341ff1bdca63
iThemes Security < 3.4.4 - Cross-Site Scripting
Media
CVE-2012-4226
Quick Post Widget <= 1.9.1 - Multiple Cross-Site Scripting
Media
CVE-2012-2572
ThreeWP Email Reflector < 1.16 - Cross-Site Scripting
Alta
CVE-2012-2580
Postie < 1.4.10 - Cross-Site Scripting
Alta
CVE-2012-2583
Mini Mail Dashboard Widget < 1.43 - Cross-Site Scripting
Media
CVE-2012-2579
WP SimpleMail <= 1.0.6 - Cross-Site Scripting
Alta
CVE-2012-6651
Vitamin < 1.1.0 - Directory Traversal
Media
CVE-2012-10013
Backend Localization <= 1.9 - Reflected Cross-Site Scripting
Media
CVE-2012-10014
Backend Localization <= 2.0 - Reflected Cross-Site Scripting
Media
CVE-2012-10015
BestWebSoft's Twitter <= 2.14 - Cross-Site Request Forgery
Media
CVE-2012-10017
Portfolio Plugin <= 2.04 - Cross-Site Request Forgery
Media
CVE-2012-6714
Count per Day Plugin < 3.2.3 - Cross-Site Scripting
Media
07bccf56-99b2-42e6-93ab-606af65e6cac
Site5 Various Affected Themes (Various Versions) - Email Spoofing
Crítica
CVE-2012-6652
A Page Flip Book < 3.0 - Directory Traversal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.