Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.638
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative valu
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks
Path Traversal in Apache James Server
Fancy Product Designer <= 4.7.4 - Admin+ SQL Injection
Anti-Malware Security and Brute-Force Firewall <= 4.21.74 - Reflected Cross-Site Scripting
Validation bypass in frourio-express
Validation bypass in frourio
Cookie and header exposure in twisted
Abort caused by allocating a vector that is too large in Tensorflow
`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow
Cross-site Scripting in LiveHelperChat
Catch Themes Demo Import <= 2.1 - Authenticated (Admin+) Arbitrary File Upload
WP-Matomo Integration (WP-Piwik) <= 1.0.26 - Cross-Site Request Forgery
Multisite Content Copier/Updater <= 1.4.0 - Reflected Cross-Site Scripting
AdRotate – Ad manager & AdSense Ads <= 5.8.17 - Admin+ SQL Injection
All-in-One WP Migration <= 7.40 - Authenticated (Admin+) Arbitrary File Upload
RegistrationMagic <= 5.0.2.1 - SQL Injection
WordPress Multisite User Sync/Unsync (Premium) <= 2.1.1 Reflected Cross-Site Scripting
TaxoPress <= 3.4.4 - Reflected Cross-Site Scripting
IP2Location Country Blocker < 2.26.9 - Authenticated Stored Cross-Site Scripting
WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent < 2.14.2 - Cross-Site Request Forgery
White Label MS <= 2.2.8 - Reflected Cross-Site Scripting
Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.