Alta
CVE-2022-3243
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.616
Media
CVE-2022-25873
Vuetify Cross-site Scripting vulnerability
Alta
CVE-2022-3208
Simple File List <= 4.4.12 - Cross-Site Request Forgery to Page Creation
Media
CVE-2022-3207
Simple File List <= 4.4.11 - Reflected Cross-Site Scripting
Media
a2ad2c0d-542e-4b40-91a8-19b27297545e
Contact Form by WPForms <= 1.7.5.3 - Authenticated (Administrator+) Arbitrary File Access via Path Traversal
Media
CVE-2022-2448
reSmush.it Image Optimizer <= 0.4.5 - Authenticated (Administrator+) Cross-Site Scripting
Media
80192348-dcf4-4bab-80d1-ae7a4d194270
Breeze <= 2.0.8 - Cross-Site Request Forgery via import_json_settings
Media
CVE-2022-2981
Download Monitor <= 4.5.97 - Authenticated (Administrator+) Arbitrary File Download
Media
CVE-2022-2944
WordPress Countdown Widget <= 3.1.9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-3136
Social Rocket <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
48784892-443f-452c-9fe9-12e73af1cf7f
Booster for WooCommerce (Free <= 5.6.2 and Premium <= 5.6.0) - Authenticated (Subscriber+) Order Modification
Alta
01aa00db-43e5-4c8a-a005-77a39ec89c94
MemberPress Downloads <= 1.2.5 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2022-3232
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5.
Media
CVE-2022-3231
LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter
Media
CVE-2022-3173
Snipe-IT vulnerable to Improper Authentication
Media
CVE-2022-3609
GetYourGuide Ticketing <= 1.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-40149
Jettison parser crash by stackoverflow
Media
CVE-2022-40152
Denial of Service due to parser crash
Alta
CVE-2022-40150
Jettison memory exhaustion
Media
CVE-2022-37248
Craft CMS Cross site Scripting vulnerability
Media
CVE-2022-37250
Craft CMS Stored Cross-site Scripting in User Addresses Title
Media
CVE-2022-3225
Budibase Improper Control of Dynamically-Managed Code Resources vulnerability
Crítica
CVE-2022-37258
steal vulnerable to Prototype Pollution
Media
CVE-2022-37251
Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.