Crítica
CVE-2022-1514
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2022-1209
Ultimate Member <= 2.3.1 - Arbitrary Redirect
Alta
CVE-2022-24897
Arbitrary filesystem write access from velocity.
Alta
ghsa-f6p5-76fp-m248
URL Rewrite vulnerability in multiple zendframework components
Media
CVE-2022-24892
Multiple valid tokens for password reset in Shopware
Alta
CVE-2022-24879
Malfunction of CSRF token validation in Shopware
Media
ghsa-m98g-63qj-fp8j
Reflected XSS on clients-registrations endpoint
Baja
ghsa-mwm4-5qwr-g9pf
Keycloak is vulnerable to IDN homograph attack
Media
CVE-2021-3424
Keycloak is vulnerable to IDN homograph attack
Media
CVE-2022-24873
Reflected Cross-site Scripting in Shopware storefront
Alta
CVE-2022-21227
Denial-of-Service when binding invalid parameters in sqlite3
Media
CVE-2022-24898
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
Baja
CVE-2020-10734
OIDC Logout redirect in keycloak
Crítica
CVE-2021-41945
Improper Input Validation in httpx
Media
CVE-2022-29412
Hermit 音乐播放器 <= 3.1.6 - Multiple Cross-Site Request Forgery
Baja
CVE-2022-29423
Countdown & Clock <= 2.3.2 - Pro Features Lock Bypass
Alta
CVE-2022-29413
Hermit 音乐播放器 <= 3.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Crítica
CVE-2022-29411
Hermit 音乐播放器 <= 3.1.6 - Unauthenticated SQL Injection
Alta
CVE-2022-29410
Hermit 音乐播放器 <= 3.1.6 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2022-29422
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.2 - Cross-Site Scripting
Media
CVE-2022-29421
Countdown & Clock <= 2.3.2 - Reflected Cross-Site Scripting
Media
CVE-2022-29415
Ravpage <= 2.16 - Reflected Cross-Site Scripting
Media
CVE-2022-29420
Countdown & Clock <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-27860
Footer Text <= 2.0.3 - Cross-Site Request Forgery to Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.