Media
CVE-2022-2515
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Media
CVE-2022-25810
Transposh WordPress Translation <= 1.0.9.1 - Missing Authorization Checks
Crítica
ghsa-m58q-qq5h-mgqq
Islandora 2.0 before 2.4.1 could allow any user to upload content into a repository
Media
ghsa-fjh6-p566-wr6q
skylot jadx affected by Incorrect Behavior Order in vulnerable dependency
Alta
CVE-2022-31172
OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
Alta
CVE-2022-31170
OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
Crítica
CVE-2022-35912
Grails framework Remote Code Execution via Data Binding
Baja
CVE-2022-31151
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
Media
CVE-2022-31150
undici before v5.8.0 vulnerable to CRLF injection in request headers
Crítica
CVE-2022-2180
GREYD.SUITE <= 1.2.6 - Unauthenticated Arbitrary File Upload
Media
63c1e570-c0de-44e0-ac39-0b9006c43efa
All in One Invite Codes <= 1.0.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-2384
Digital Publications by Supsystic <= 1.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
277942cb-f4ca-4197-8f61-2e0cb03115a6
Digital Publications by Supsystic <= 1.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-25276
Drupal core - SA-CORE-2022-015
Alta
CVE-2022-25277
Drupal core - SA-CORE-2022-014
Media
CVE-2022-25278
Drupal core - SA-CORE-2022-013
Alta
CVE-2022-25275
Drupal core - SA-CORE-2022-012
Crítica
CVE-2016-1000273
Java Melody vulnerable to cross-site scripting
Alta
CVE-2022-34169
Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets
Media
CVE-2022-34650
Team <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
e8ac3187-b065-434e-9051-d13330dd3da5
Duplicate Page and Post <= 2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-2152
Duplicate Page and Post <= 2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-34853
Team <= 1.2.6 - Authenticated (Contibutor+) Stored Cross-Site Scripting
Alta
37725a72-0478-4f56-b87f-e427b1f5fb58
Ninja Job Board – Ultimate WordPress Job Board Plugin <= 1.3.2 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.