Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
drupal/jquery_ui_checkboxradio - SA-CONTRIB-2022-052
SP Project & Document Manager <= 4.59 - Reflected Cross-Site Scripting
ts-deepmerge before 2.0.2 vulnerable to Prototype Pollution
Simple Payment Donations <= 4.2.0 - Reflected Cross-Site Scripting
Easy Digital Downloads <= 3.0.1 - PHP Object Injection
Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization
Directorist <= 7.3.0 - Sensitive Information Disclosure
Simple Payment Donations <= 4.2.0 - Unauthenticated Stored Cross-Site Scripting
SP Project & Document Manager <= 4.59 - Reflected Cross-Site Scripting
Gallery PhotoBlocks <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting
Gallery PhotoBlocks <= 1.2.8 - Cross-Site Request Forgery
AS – Create Pinterest Pinboard Pages <= 1.0 - Authenticated Options Change to Stored Cross-Site Scripting
It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14
Cockpit before 2.2.0 vulnerable to Insufficient Session Expiration
Contest Gallery <= 17.0.4 - Authenticated (Author+) SQL Injection
WPide <= 2.6 - Authenticated (Administrator+) Arbitrary File Upload
Social Slider Feed <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
WooCommerce Payments <= 4.5.0 - Payment Bypass
Floating Action Button <= 1.2 - Missing Authorization
amCharts: Charts and Maps <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPide <= 2.6 - Authenticated (Administrator+) Arbitrary File Read
WP Database Backup <= 5.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.