Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.646
Insufficient user input in Apache Jetspeed-2
Apache Superset allows authenticated users to access metadata they have no permission to
Code injection in Apache Commons Configuration
Progressive License <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Microsoft Advertising Universal Event Tracking (UET) <= 1.0.3 - Authenticated Stored Cross-Site Scripting
Keep Backup Daily <= 2.0.3 - Reflected Cross-Site Scripting
Copyright Proof <= 4.16 - Reflected Cross-Site Scripting
Shortcode For Current Date <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
JUX Timetable x
Protected fields exposed via LiveQuery
Improper handling of email input
Moment.js vulnerable to Inefficient Regular Expression Complexity
Possible leak of key's raw field if declared length is incorrect
Use of Hard-coded Credentials in Nacos
Flexi Quote Rotator <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Social Share Buttons by Supsystic <= 2.2.6 - SQL Injection
Slide Anything – Responsive Content / HTML Slider and Carousel <= 2.3.46 - Authenticated (Admin+) Stored Cross-Site Scripting
MakeStories (for Web Stories) <= 2.6.4 - Cross-Ste Scripting
Web and WooCommerce Addons for WPBakery Builder <= 1.4.4.1 - Missing Authorization Checks
Flexi Quote Rotator <= 0.9.4 - Authenticated Stored Cross-Site Scripting
WP Visitor Statistics (Real Time Traffic) <= 5.7 - Unauthenticated SQL Injection
Simple Membership <= 4.1.2 - Membership Privilege Escalation
WP PayPal <= 1.2.3.8 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.