Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
WordPress OpenID Connect Client <= 2.1.7 - Authentication Bypass
Download Manager <= 3.2.43 - Reflected Cross-Site Scripting
Loading Page with Loading Screen <= 1.0.82 - Cross-Site Scripting
Login with WHMCS <= 1.11.3 - Authentication Bypass
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore
Authenticated Stored Cross-site Scripting in Shopware
Improper Handling of Exceptional Conditions in Newtonsoft.Json
Cross-site Scripting in NukeViet CMS
Denial of Service in Spring Cloud Function
Cross-site Scripting in krayin/laravel-crm
Dropshipping and affiliates for Amazon and woocommerce <= 1.4.3 - Missing Authorization
Our Services Showcase <= 2.0 - Missing Authorization
Free Live Chat Support <= 1.0.11 - Cross-Site Request Forgery to Cross-Site Scripting
Football Live Scores <= 1.5 - Missing Authorization
OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Cross-Site Scripting
Re:amaze Helpdesk & Live Chat <= 1.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Simple Post Notes <= 1.7.5 - Subscriber+ Stored Cross-Site Scripting
Login with Cognito <= 1.4.6 - Authentication Bypass
404s <= 3.4.9 - Administrator+ Cross-Site Scripting
DX Share Selection <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
Freshdesk (official) <= 2.3.6 - Cross-Site Request Forgery
WP Meta SEO <= 4.4.8 - Cross-Site Request Forgery to Settings Update
eBay Dropshipping and Affiliate by Wooshark <= 1.5.6 - Unprotected AJAX Actions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.