Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.071
Restablecer filtrosSnipe-IT vulnerable to Improper Authentication
Craft CMS Cross site Scripting vulnerability
Craft CMS Stored Cross-site Scripting in User Addresses Title
Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts
Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page
Shopware contains sensitive data in backend customer module
Shopware access control list bypassed via crafted specific URLs
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
TYPO3 CMS vulnerable to User Enumeration via Response Timing
TYPO3 CMS missing check for expiration time of password reset token for backend users
TYPO3 CMS Stored Cross-Site Scripting via FileDumpController
TYPO3 CMS vulnerable to Cross-Site Scripting in <f:asset.css> view helper
Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto
ThinkPHP deserialization vulnerability
Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
Feehi CMS host header injection vulnerability
UniSharp Laravel Filemanager directory traversal vulnerability
Moodle Cross-site Scripting vulnerability
Awesome Support <= 6.0.7 - Authenticated Stored Cross-Site Scripting
Appwrite Vulnerable to Cross-site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.