Alta
CVE-2021-41146
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Alta
CVE-2021-23452
Prototype Pollution in x-assign
Alta
CVE-2021-41167
modern-async's `forEachSeries` and `forEachLimit` functions do not limit the number of requests
Media
CVE-2021-3863
Cross-site Scripting in snipe-it
Media
CVE-2020-25703
Exposure of Sensitive Information to an Unauthorized Actor in Moodle
Media
CVE-2021-3858
Cross-Site Request Forgery in snipe-it
Media
CVE-2021-3851
Open Redirect in firefly-iii
Media
CVE-2021-3879
Cross-site Scripting in snipe-it
Alta
CVE-2019-10170
Privilege Defined With Unsafe Actions in Keycloak
Alta
CVE-2021-39321
Sassy Social Share 3.3.23 - Object Injection
Media
CVE-2021-39354
Easy Digital Downloads <= 2.11.2 - Reflected Cross-Site Scripting
Media
CVE-2021-39328
Simple Job Board <= 2.9.4 Authenticated Stored Cross-Site Scripting
Alta
CVE-2021-39352
Catch Themes Demo Import <= 1.7 - Arbitrary File Upload
Alta
CVE-2021-4330
Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload
Media
20835df3-677c-4136-af50-46bc272e4f9e
Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments <= 3.7.2.3 - Open Redirect
Alta
CVE-2021-24803
Core Tweaks WP Setup <= 4.1 - Cross-Site Request Forgery
Alta
CVE-2021-42771
Directory Traversal in Babel
Media
CVE-2021-24700
Forminator <= 1.15.2 - Admin+ Stored Cross-Site Scripting
Alta
CVE-2021-24786
Download Monitor <= 4.4.4 - Admin+ SQL Injection via orderby parameter
Media
CVE-2021-24812
BetterLinks – Shorten, Track and Manage any URL <= 1.2.5 - Stored Cross-Site Scripting
Media
2c148123-9da3-4384-8aec-4ee71cb05e01
Responsive Image Slider, Photo Gallery And Carousel < 1.3.6 - Missing Authorization
Crítica
CVE-2021-42575
Policies not properly enforced in OWASP Java HTML Sanitizer
Media
CVE-2021-41131
Client metadata path-traversal
Crítica
CVE-2021-23449
Prototype Pollution in vm2
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.