Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.071
Restablecer filtrosContao: Remember-me tokens will not be cleared after a password change
Contao: Possible cookie sharing with external domains while checking protected pages for broken links
Shopware Improper Session Handling in store-api account logout
Concrete CMS Stored XSS in blocks of type file
Concrete CMS Stored XSS in the Search Field
Concrete CMS Stored XSS in the Custom Class page editing
Concrete CMS Cross-site Scripting (XSS) in the Advanced File Search Filter
Concrete CMS Stored XSS on the calendar color settings screen
amphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames
AMPHP Denial of Service via HTTP/2 CONTINUATION Frames
Dolibarr ERP CRM Code Injection vulnerability during installation
Gleez Cms Server Side Request Forgery (SSRF) vulnerability
OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass
UVDesk Community Helpdesk Improper Privilege Management
RosarioSIS cross site scripting vulnerability
Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability
Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability
Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability
Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability
Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability
Centreon updateGroups SQL Injection Remote Code Execution Vulnerability
Kimai API returns timesheet entries a user should not be authorized to view
Winter CMS Server-Side Template Injection (SSTI) vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.