Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 764
Restablecer filtrosERC1155Supply vulnerability in OpenZeppelin Contracts
Cross-site scripting vulnerability in TinyMCE plugins
UUPSUpgradeable vulnerability in @openzeppelin/contracts
UUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeable
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
TimelockController vulnerability in OpenZeppelin Contracts
TimelockController vulnerability in OpenZeppelin Contracts
Cross-site Scripting in video.js
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Regular Expression Denial of Service (ReDOS)
Calipso Arbitrary File Write via Archive Extraction (Zip Slip)
Node-Redis potential exponential regex in monitor mode
html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)
Vulnerability allowing for reading internal HTTP resources
ReDOS vulnerabities: multiple grammars
Malicious Package in radic-util
Malicious Package in motiv.scss
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.