Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
OS Command Injection in lifion-verify-deps
Neos CMS vulnerable to XSS in various backend modules
Currency Switcher for WordPress <= 1.0.3 - Reflected Cross-Site Scripting
Image Gallery – Grid Gallery <= 1.1.1 - Stored Cross-Site Scripting
Easy Pricing Tables <= 3.2.0 - Reflected Cross-Site Scripting
JUX Timetable - SQL Injection
Login timing attack in ibexa/core
Login timing attack in ezsystems/ezpublish-kernel
Login timing attack in ezsystems/ezplatform-kernel
Embedded Malicious Code in ctx
Packing does not respect root-level ignore files in workspaces
Phoenix-ws source code and data in extensions folder is publicly available
Denial of service in bottle
Browser and Operating System Finder <= 1.2 - Missing Authorization
core plugin for kitestudio themes <= 2.2.1 - Reflected Cross-Site Scripting
My Content Management <= 1.7.1 - Cross-Site Scripting
Trade Runner <= 3.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site Scripting
HTML2WP <= 1.0.0 - Arbitrary File Upload
Woody code snippets <= 2.4.5 - Reflected Cross-Site Scripting
ShortPixel Image Optimizer <= 4.22.9 - Reflected Cross-Site Scripting
Download Manager <= 3.2.42 - Reflected Cross-Site Scripting
HTML2WP <= 1.0.0 - Arbitrary File Deletion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.