Alta
CVE-2022-3850
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
CVE-2022-3822
Donations via PayPal <= 1.9.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2022-32287
Apache UIMA Path Traversal vulnerability
Media
CVE-2021-37823
OpenCart SQL injection vulnerability
Media
CVE-2019-19040
Reflected Cross site scripting (XSS) in kairosdb
Crítica
CVE-2022-39382
@keystone-6/core's NODE_ENV defaults to development with esbuild
Media
CVE-2022-44543
TYPO3 Extension femanager vulnerable to Broken Access Control
Media
CVE-2020-36608
Tribal Systems Zenario CMS vulnerable to Cross-site Scripting
Media
CVE-2022-3823
Beautiful Cookie Consent Banner <= 2.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-3839
Analytics for WP <= 1.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-3603
Export customers list csv for WooCommerce <= 2.0.67 - CSV Injection
Alta
CVE-2022-3852
VR Calendar <= 2.3.3 - Cross-Site Request Forgery
Media
CVE-2022-3833
Fancier Author Box by ThematoSoup <= 1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
892a1983-018b-480d-adab-29c32fd88be5
Photo Gallery by 10Web <= 1.8.0 - Reflected Cross-Site Scripting
Media
CVE-2022-3834
Google Forms <= 0.95 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-3847
Showing URL in QR Code <= 0.0.1 - Cross-Site Request Forgery to Cross-Site Scripting
Media
CVE-2022-3831
reCAPTCHA <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
217d68dc-6133-4b7e-9d8f-bb8fc18f1c12
001 Prime Strategy Translate Accelerator <= 1.1.1 - Missing Authorization
Media
CVE-2022-3601
Image Hover Effects Css3 <= 4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-43982
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.
Media
CVE-2022-43985
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.
Crítica
CVE-2022-3827
Centreon vulnerable to SQL Injection
Media
CVE-2022-43670
Apache Sling App CMS vulnerable to Cross-site Scripting
Media
ghsa-8r69-3cvp-wxc3
Batched HTTP requests may set incorrect `cache-control` response header
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.