Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode
ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting
OpenCMS Cross-Site Scripting vulnerability
TYPO3 Arbitrary Shell Execution in Swiftmailer library
TYPO3 Possible Insecure Deserialization in Extbase Request Handling
TYPO3 Cross-Site Scripting in Filelist Module
mysql2 vulnerable to Prototype Pollution
TYPO3 Cross-Site Scripting in Link Handling
TYPO3 Cross-Site Scripting in Form Framework validation handling
TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API
TYPO3 Broken Access Control in Import Module
TYPO3 Security Misconfiguration in Frontend Session Handling
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode
TYPO3 Information Disclosure in Backend User Interface
TYPO3 Information Disclosure in User Authentication
TYPO3 Disclosure of Information about Installed Extensions
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip
TYPO3 Information Disclosure in Page Tree
TYPO3 Security Misconfiguration in User Session Handling
TYPO3 Cross-Site Scripting in Form Framework
TYPO3 Cross-Site Scripting in Language Pack Handling
TYPO3 Arbitrary Code Execution via File List Module
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.