Alta
CVE-2022-31193
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Alta
CVE-2022-31192
JSPUI Possible Cross Site Scripting in "Request a Copy" Feature
Alta
CVE-2022-31191
JSPUI spellcheck and autocomplete tools vulnerable to Cross Site Scripting
Media
CVE-2022-31190
XMLUI's metadata of withdrawn Items is exposed to anonymous users
Media
CVE-2022-31189
JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization
Media
CVE-2022-35917
Solana Pay Vulnerable to Weakness in Transfer Validation Logic
Baja
CVE-2022-31186
next-auth before v4.10.2 and v3.29.9 leaks excessive information into log
Baja
CVE-2022-35921
Byobu user preference to prevent private discussions being started are not respected
Crítica
CVE-2022-21186
@acrontum/filesystem-template vulnerable to Command Injection due to fetchRepo API missing sanitization
Media
CVE-2020-1691
Moodle XSS Vulnerability
Alta
CVE-2022-2053
Undertow vulnerable to Dos via Large AJP request
Alta
b49ae7fc-e860-4387-b596-12640ec7277f
WPCafe – Food Menu, WooCommerce Food Ordering, Food Delivery, Pickup and Restaurant Reservation <= 2.1.4 - Cross-Site Scripting
Media
afc9114b-80b7-4caf-ab6b-35747ff5057b
Frontend File Manager & Sharing – User Private Files <= 1.1.0 - Sensitive Information Disclosure
Media
a2c5e232-3561-43a1-bdfa-4a68f20b5889
Frontend File Manager & Sharing – User Private Files <= 1.1.1 - Missing Authorization
Alta
49e4dc41-dd5a-4689-9818-e742d1def2f0
WordPress HTTPS (SSL) <= 3.4.0 - Missing Authorization to Settings Change
Alta
CVE-2022-34158
Apache JSPWiki CSRF due to crafted invocation on the Image plugin
Media
CVE-2022-27166
Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jsp
Media
CVE-2022-28732
Apache JSPWiki XSS due to crafted request in WeblogPlugin
Media
CVE-2022-28731
Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp
Media
CVE-2022-28730
Apache JSPWiki XSS due to incomplete patch for CVE-2021-40369
Crítica
CVE-2022-25168
Apache Hadoop argument injection vulnerability
Media
CVE-2022-35144
Raneto vulnerable to Cross-site Scripting
Crítica
CVE-2022-35143
Raneto v0.17.0 employs weak password complexity requirements
Alta
CVE-2022-35142
Raneto Denial of Service via crafted payload injected into `Search` parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.