Alta
CVE-2022-22936
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Baja
CVE-2022-22935
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonat
Media
CVE-2022-28290
WordPress Country Selector <= 1.6.5 - Reflected Cross-Site Scripting via AJAX call of check_country_selector
Media
CVE-2022-28221
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting
Media
a3335613-1206-4555-8e48-748a336548d4
Animate It! < 2.4.0 - Cross-Site Scripting
Media
CVE-2022-23183
Advanced Custom Fields <= 5.12 - Authenticated Information Disclosure
Media
2ef5a8f1-ed3c-48bb-9554-b42e9e8d645d
Curtain < 1.0.2 - Unauthenticated Maintenance Mode Enabled/Disable
Media
CVE-2022-1186
Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure
Media
CVE-2022-28222
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting
Crítica
CVE-2022-1392
Videos sync PDF <= 1.7.4 - Unauthenticated Local File Inclusion
Media
CVE-2022-1559
Clipr <= 1.2.3 - Admin+ Stored Cross-Site Scripting
Baja
CVE-2022-24784
Discoverability of user password hash in Statamic CMS
Alta
CVE-2021-26601
Path Traversal in ImpressCMS
Crítica
CVE-2021-26600
Type Confusion in ImpressCMS
Crítica
CVE-2021-26599
SQL Injection in ImpressCMS
Media
CVE-2021-26598
Incorrect Access Control in ImpressCMS
Crítica
CVE-2021-46433
Sandbox bypass in fenom
Media
CVE-2022-26980
Cross-site Scripting in teampass
Media
CVE-2022-0363
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
Crítica
CVE-2022-0782
Donations <= 1.8 - Unauthenticated SQL Injection
Crítica
CVE-2022-0541
FloLaunch <= 2.4 - Missing Authorization
Media
CVE-2022-1092
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
Alta
CVE-2022-24303
Path traversal in Pillow
Media
CVE-2022-0879
Caldera Forms <= 1.9.6 - Reflected Cross-Site Scripting via cf-api
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.