Media
CVE-2022-37328
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Alta
CVE-2022-36798
Mega Addons For WPBakery Page Builder <= 4.2.7 - Cross-Site Request Forgery to Settings Update
Media
CVE-2022-36791
Torro Forms <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2022-2939
WP Cerber Security <= 9.0 - User Enumeration Bypass
Media
CVE-2022-36033
jsoup may not sanitize code injection XSS attempts if SafeList.preserveRelativeLinks is enabled
Crítica
CVE-2022-39227
python-jwt vulnerable to token forgery with new claims
Crítica
CVE-2022-2996
python-scciclient vulnerable to Man-in-the-middle (MITM) attacks
Media
CVE-2022-37023
Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data
Alta
CVE-2022-37022
Apache Geode versions deserialization of untrusted datawhen using JMX over RMI on Java 11
Crítica
CVE-2022-37021
Apache Geode vulnerable to Deserialization of Untrusted Data
Crítica
CVE-2022-2466
Quarkus does not terminate HTTP requests header context
Media
CVE-2022-36365
WHA Crossword <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2022-36383
Word Search Puzzles game <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2022-37335
Word Search Puzzles game <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2022-37338
Blossom Recipe Maker <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2022-37411
Captcha Code <= 2.7 - Cross-Site Request Forgery to Plugin Settings Update
Media
CVE-2022-36796
CallRail Phone Call Tracking <= 0.4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2022-36355
Easy Org Chart <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2022-40310
Rate my Post – WP Rating System <= 3.3.4 - Race Condition
Alta
CVE-2022-35277
GetResponse <= 5.5.19 - Cross-Site Request Forgery
Alta
CVE-2022-36373
MP3 jPlayer <= 2.7.3 - Cross-Site Request Forgery
Media
CVE-2022-37330
WHA Crossword <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Baja
CVE-2022-36036
Improper Control of Generation of Code ('Code Injection') in mdx-mermaid
Alta
CVE-2022-36034
Polynomial regular expression used on uncontrolled data in nitrado.js
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.