Media
CVE-2022-4496
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Crítica
CVE-2020-36640
bonita-connector-webservice XML External Entity vulnerability
Crítica
CVE-2020-36641
aXMLRPC XML External Entity vulnerability
Media
CVE-2017-20162
Vercel ms Inefficient Regular Expression Complexity vulnerability
Alta
CVE-2021-4305
robots-txt-guard Inefficient Regular Expression Complexity vulnerability
Alta
CVE-2023-22461
@mattkrick/sanitize-svg vulnerable to Cross-Site Scripting (XSS)
Media
CVE-2019-25095
A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site script
Media
CVE-2016-15010
** UNSUPPPORTED WHEN ASSIGNED **** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerabi
Media
CVE-2021-4303
Xataface vulnerable to Cross-site Scripting
Media
CVE-2022-4831
Custom User Profile Fields <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-0252
Contextual Related Posts <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute
Media
CVE-2023-0403
Social Warfare <= 4.3.1 - Cross-Site Request Forgery
Media
CVE-2022-4764
Simple File Downloader <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-0162
CPO Companion <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-4470
Widgets for Google Reviews < 9.8 - Authenticated (Contributor+) Stored XSS
Media
CVE-2023-0402
Social Warfare <= 4.3.0 - Missing Authorization
Media
CVE-2022-4649
WP Extended Search <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2022-4776
CC Child Pages <= 1.42 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2022-48216
Uniswap Universal Router Incorrect Authorization vulnerability
Alta
CVE-2022-25926
window-control vulnerable to Command Injection due to improper input sanitization
Crítica
CVE-2022-45875
Apache DolphinScheduler vulnerable to Improper Input Validation
Media
CVE-2019-25094
typo3-appointments vulnerable to Cross-site Scripting
Alta
CVE-2022-38723
Gravitee API Management contains Path Traversal
Media
CVE-2022-4654
Easy Pricing Tables <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.