Media
CVE-2021-39138
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Media
CVE-2021-32809
Clipboard feature vulnerability allowing to inject arbitrary HTML into the editor using paste functionality
Alta
CVE-2021-32808
Widget feature vulnerability allowing to execute JavaScript code using undo functionality
Media
CVE-2021-37700
Clipboard-based DOM-XSS
Media
CVE-2021-37699
Open Redirect in Next.js
Media
CVE-2021-23414
Cross-site Scripting in video.js
Media
CVE-2021-23417
Prototype Pollution in deepmergefn
Media
CVE-2021-23416
Cross-site Scripting in curly-bracket-parser
Media
CVE-2021-3664
Open redirect in url-parse
Media
CVE-2021-23413
jszip Vulnerable to Prototype Pollution
Media
CVE-2021-23343
Regular Expression Denial of Service in path-parse
Media
CVE-2018-3718
vercel/serve allows access to restricted files if filename is URL encoded.
Media
ghsa-hxwm-x553-x359
Arbitrary Command Injection due to Improper Command Sanitization
Baja
ghsa-xh2p-7p87-fhgh
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
Alta
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
Alta
CVE-2021-32803
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Media
CVE-2021-32796
Misinterpretation of malicious XML input
Alta
ghsa-6cj2-92m5-7mvp
Improperly Controlled Modification of Object Prototype Attributes
Media
CVE-2021-23411
Cross-site scripting in anchorme
Crítica
CVE-2021-23412
Command injection in gitlogplus
Crítica
CVE-2020-13619
OS Command Injection in Locutus
Media
CVE-2021-32012
Denial of Service in SheetJS Pro
Media
CVE-2021-32013
Denial of Service in SheetsJS Pro
Media
CVE-2021-32014
Denial of Service in SheetJS Pro
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.