Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.125
Restablecer filtrosImageMagick has a Stack Overflow in DestroyXMLTree()
ImageMagick has a heap-Buffer-Overflow write of a single zero byte when parsing xml.
ImageMagick has an integer overflow in despeckle operation causing a heap buffer overflow on 32-bit builds
ImageMagick has a heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds
DNN: Same HostGUID for all new installs
DNN: Force Friend Request Acceptance
DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory
AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction
ImageMagick: META reader memory leak in the APP1JPEG input path
ImageMagick has possible memory leak in ASHLAR coder when action fails
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation
Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString
Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException
Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of Service
Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of Service
Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse
Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()
Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.