Media
6ac3b00e-26f2-471d-a682-6cb4939e819e
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
611b88f4-96ae-47e4-8642-e09bee333468
Royal Custom CSS for Page and Post <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2022-34658
Download Manager <= 3.2.48 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2022-2317
Simple Membership <= 4.1.2 - Membership Privilege Escalation
Alta
CVE-2022-31147
jquery-validation Regular Expression Denial of Service due to arbitrary input to url2 method
Media
ghsa-c58j-88f5-h53f
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares
Media
CVE-2022-31108
Possible inject arbitrary `CSS` into the generated graph affecting the container HTML
Alta
CVE-2022-30290
In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacker can abuse the identified vulnerability in order to arbitrarily change their reg
Media
CVE-2022-30289
A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality of OpenCTI through 5.2.4. An attacker can abuse the vulnerability to upload a malicious file that will
Media
CVE-2022-2309
lxml NULL Pointer Dereference allows attackers to cause a denial of service
Crítica
CVE-2022-33171
SQL injection in typeORM
Media
CVE-2022-2300
Cross-site Scripting in microweber
Media
CVE-2022-2181
Advanced WordPress Reset <= 1.5 - Reflected Cross-Site Scripting
Alta
CVE-2022-2444
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Media
d7bee25e-7574-4d3d-ad58-9b30d99de525
LearnPress – WordPress LMS Plugin <= 4.1.6.7 - Reflected Cross-Site Scripting
Alta
CVE-2022-2256
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Alta
CVE-2022-2443
FreeMind WP Browser <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting
Media
CVE-2022-0598
Login with phone number <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-2278
Featured Image from URL (FIFU) <= 4.0.0 - Stored Cross-Site Scripting
Media
CVE-2022-2305
Popups <= 1.9.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2022-2325
Invitation Based Registrations <= 2.2.84 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2022-2435
AnyMind Widget <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Crítica
CVE-2022-34265
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
Media
CVE-2022-0594
Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic <= 9.7.5 - Information Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.