Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Checkfront Online Booking System <= 3.6 - Cross-Site Request Forgery
WP-Matomo Integration (WP-Piwik) <= 1.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Magee Shortcodes <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
EventON <= 2.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting
Memberlite Shortcodes <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Shared Files <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting
Improper neutralization of SQL parameter in Cookie Law - Banner + Cookie blocker module for PrestaShop
Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation
Jenkins temporary plugin file created with insecure permissions
Jenkins does not exclude sensitive build variables from search
Jenkins temporary uploaded file created with insecure permissions
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Jenkins temporary uploaded file created with insecure permissions
Jenkins Build Failure Analyzer Plugin missing permission check
Jenkins Cross-site Scripting vulnerability
Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability
Drupal core - SA-CORE-2023-006
ReportLab vulnerable to remote code execution via paraparser
Spring for GraphQL may be exposed to GraphQL context with values from a different session
Quarkus HTTP vulnerable to incorrect evaluation of permissions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.