Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
SALERT <= 1.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Menu - Ordering - Reservations <= 2.3.6 - Reflected Cross-Site Scripting via 'redirect'
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting
Easy Hide Login <= 1.0.8 - Cross-Site Request Forgery
VK All in One Expansion Unit <= 9.88.1.0 - Stored (Contributor+) Cross-Site Scripting in Profile Setting
StopBadBots <= 7.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Radio Station <= 2.4.0.9 - Reflected Cross-Site Scripting
Wise Chat <= 3.1.3 - Cross-Site Request Forgery
Team Circle Image Slider With Lightbox <= 1.0.17 - Reflected Cross-Site Scripting
VK All in One Expansion Unit <= 9.88.1.0 - Stored (Contributor+) Cross-Site Scripting in CTA Post
Post Snippets <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'snippet_content'
VK Blocks <= 1.53.0.1 - Stored (Contributor+) Cross-Site Scripting in Post
Improper neutralization of SQL parameter in Posthemes - Static Footer module for PrestaShop
jsreport vulnerable to code injection
vyper vulnerable to storage allocator overflow
MCMS vulnerable to arbitrary code execution via crafted thumbnail
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.
MW WP Form <= 4.4.2 - Directory Traversal via _file_upload
Download Manager <= 3.2.70 - Insufficient Authorization to Information Disclosure
ShortPixel Adaptive Images <= 3.7.1 - Cross-Site Request Forgery via shortpixel_ai_handle_page_action
Manager for Icomoon <= 2.0 - Unauthenticated Arbitrary File Upload via 'upload'
Snow Monkey Forms <= 5.1.1 - Directory Traversal via 'view' REST endpiont
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.