Media
CVE-2021-21619
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2021-21618
Stored XSS vulnerability in Jenkins Repository Connector Plugin
Alta
CVE-2021-21617
CSRF vulnerability in Jenkins Configuration Slicing Plugin
Media
CVE-2020-35571
MantisBT XSS in manage_custom_field_update.php
Alta
CVE-2021-3396
OpenNMS Horizon RCE via JEXL2 expression
Alta
CVE-2020-36245
GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi
Media
CVE-2020-25340
An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correctly freed, if the nfstream object is directly destroyed without being used after it is created, it will cause a
Media
CVE-2021-23338
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.
Media
CVE-2021-21031
Magento Insufficient Session Expiration
Media
CVE-2021-21022
Magento Insecure Direct Object Reference (IDOR) in the product module
Media
CVE-2021-21027
Magento cross-site request forgery (CSRF) vulnerability via the GraphQL API
Media
CVE-2021-21032
Magento Insufficient Session Expiration
Media
CVE-2021-21023
Magento stored cross-site scripting vulnerability in the admin console
Alta
CVE-2021-21030
Magento stored cross-site scripting (XSS) in the customer address upload feature
Media
CVE-2021-21026
Magento improper authorization vulnerability in the integrations module
Crítica
CVE-2021-21019
Magento XML injection in the Widgets module
Media
CVE-2021-21029
Magento Reflected Cross-site Scripting vulnerability via 'file' parameter
Crítica
CVE-2021-21024
Magento Blind SQL Injection in the Search module
Crítica
CVE-2021-21014
Magento vulnerable to a file upload restriction bypass
Crítica
CVE-2021-21025
Magento XPath Injection
Media
CVE-2021-21020
Magento Improper Access Control
Crítica
CVE-2021-21018
Magento OS Command Injection
Crítica
CVE-2021-21016
Magento OS command injection via the WebAPI
Alta
CVE-2021-21015
Magento OS command injection via the customer attribute save controller
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.