Media
3a0d85e8-33fa-46eb-b71b-d93715bc373e
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Alta
CVE-2022-37405
Better Font Awesome <= 2.0.1 - Cross-Site Request Forgery to Plugin Settings Update
Alta
CVE-2022-38059
Access Code Feeder <= 1.0.3 - Missing Authorization
Media
CVE-2022-35725
wp-forecast <= 7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Sin evaluar
drupal-contrib-2022-053
drupal/commerce_elavon - SA-CONTRIB-2022-053
Alta
CVE-2021-4041
ansible-runner vulnerable to shell command injection
Media
CVE-2022-33916
Exposure of Sensitive Information in OPCFoundation.NetStandard.Opc.Ua.Server
Alta
CVE-2022-25304
Uncontrolled Resource Consumption in asyncua and opcua
Media
CVE-2019-25075
Path Traversal in Gravitee API Management
Alta
CVE-2022-25231
node-opcua DoS vulnerability via message with memory allocation that exceeds v8's memory limit
Alta
CVE-2022-21208
Uncontrolled Resource Consumption in node-opcua
Media
CVE-2022-2796
Pimcore Cross-site Scripting (XSS)
Media
CVE-2022-35278
HTML Injection in ActiveMQ Artemis Web Console
Media
CVE-2020-35509
Keycloak vulnerable to Improper Certificate Validation
Crítica
CVE-2022-37223
SQL injection in jflyfox jfinal
Crítica
CVE-2022-37199
SQL injection in jflyfox jfinal
Baja
CVE-2022-38665
RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin
Media
CVE-2022-38664
Cross-site Scripting in Jenkins Job Configuration History Plugin
Media
CVE-2022-38663
Improper masking of credentials Jenkins in Git Plugin
Media
CVE-2022-50945
3dady real-time web stats <= 1.0 - Authenticated (Administrator+) Stored Cross Site Scripting
Media
CVE-2021-3702
ansible-runner vulnerable to Race Condition
Media
CVE-2021-3701
ansible-runner has default temporary files written to world R/W locations
Alta
CVE-2022-2930
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.
Alta
CVE-2022-2927
Missing password strength check in notrinos/notrinos-erp
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.