Alta
CVE-2022-23607
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Media
CVE-2021-23760
Prototype Pollution in keyget
Alta
CVE-2021-23558
Prototype Pollution in bmoor
Media
CVE-2022-0394
Cross-site Scripting in LiveHelperChat
Media
ghsa-f7qw-5fgj-247x
Cross-site Scripting and Open Redirect in plone.app.contenttypes
Alta
CVE-2021-43859
Denial of Service by injecting highly recursive collections or maps in XStream
Alta
CVE-2022-23596
Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive
Alta
CVE-2022-23601
CSRF token missing in Symfony
Crítica
CVE-2021-23484
Exposure of Resource to Wrong Sphere in Zip-Local
Alta
CVE-2022-23181
Race condition in Apache Tomcat
Alta
CVE-2021-23460
Prototype pollution in min-dash
Media
CVE-2021-4172
Cross-site Scripting in showdoc
Media
CVE-2022-23180
Contact Form & Lead Form Elementor Builder < 1.7.4 - Arbitrary Settings Change
Crítica
CVE-2022-0434
Page Views Count Plugin <= 2.4.14 - Unauthenticated SQL Injection
Media
CVE-2021-25098
Easy Pricing Tables <= 3.1.2 - Arbitrary Post Removal via Cross-Site Request Forgery
Media
CVE-2022-0426
Product Feed PRO for WooCommerce <= 11.2.1 - Reflected Cross-Site Scripting
Alta
CVE-2021-24952
Conversios.io - Google Analytics and Google Shopping plugin for WooCommerce <= 4.6.1 Authenticated SQL Injection
Media
CVE-2021-24821
Cost Calculator <= 1.5 - Contributor+ Stored Cross-Site Scripting
Alta
CVE-2021-24820
Cost Calculator <= 1.8 - Authenticated Local File Inclusion
Crítica
CVE-2022-0441
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
Media
CVE-2022-21659
Observable Response Discrepancy in Flask-AppBuilder
Alta
CVE-2022-0383
WP Review Slider < 11.0 - SQL Injection
Alta
CVE-2021-24959
WP Email Users <= 1.7.6 - SQL Injection
Crítica
CVE-2022-0412
TI WooCommerce Wishlist / TI WooCommerce Wishlist Pro < 1.40.1 - Unauthenticated SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.