Alta
CVE-2021-37713
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 5.032
Restablecer filtros
Alta
CVE-2021-39134
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
Alta
CVE-2021-39135
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
Crítica
CVE-2021-39168
TimelockController vulnerability in OpenZeppelin Contracts
Crítica
CVE-2021-39167
TimelockController vulnerability in OpenZeppelin Contracts
Alta
CVE-2021-39131
Improper Handling of Unexpected Data Type in ced
Alta
CVE-2021-37695
Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.
Media
CVE-2021-32809
Clipboard feature vulnerability allowing to inject arbitrary HTML into the editor using paste functionality
Alta
CVE-2021-32808
Widget feature vulnerability allowing to execute JavaScript code using undo functionality
Media
CVE-2021-37700
Clipboard-based DOM-XSS
Media
CVE-2021-37699
Open Redirect in Next.js
Media
CVE-2021-23343
Regular Expression Denial of Service in path-parse
Media
ghsa-hxwm-x553-x359
Arbitrary Command Injection due to Improper Command Sanitization
Baja
ghsa-xh2p-7p87-fhgh
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
Alta
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
Alta
CVE-2021-32803
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Media
CVE-2021-32796
Misinterpretation of malicious XML input
Alta
ghsa-6cj2-92m5-7mvp
Improperly Controlled Modification of Object Prototype Attributes
Media
CVE-2021-23411
Cross-site scripting in anchorme
Crítica
CVE-2021-23412
Command injection in gitlogplus
Media
CVE-2021-39192
Privilege escalation: all users can access Admin-level API keys
Media
CVE-2021-3647
URIjs Vulnerable to Hostname spoofing via backslashes in URL
Alta
CVE-2021-32770
Basic-auth app bundle credential exposure in gatsby-source-wordpress
Alta
CVE-2021-32736
Prototype Pollution in think-helper
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.