Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Cross-site Scripting in teddy
Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name
DOS and Open Redirect with user input
Risk of code injection
Stored XSS with custom URLs in PrestaShop module ps_linklist
Discounts Manager for Products <= 3.4.4 - Reflected Cross-Site Scripting
Insecure random number generation in keypair
WP Project Manager <= 2.4.13 - Authenticated Stored Cross-Site Scripting
Cross-site Scripting in django-unicorn
Post Expirator <= 2.5.1 - Contributor+ Arbitrary Post Schedule Deletion
Pie Register <= 3.7.1.5 - Unauthenticated SQL Injection
Comments - wpDiscuz <= 7.3.3 - Arbitrary Comment Addition/Edition/Deletion by Cross-Site Request Forgery
404 to 301 <= 3.0.8 - Logs Deletion via Cross-Site Request Forgery
Similar Posts <= 3.1.5 - Admin+ Arbitrary PHP Code Execution
Squaretype - Modern Blog WordPress Theme < 3.0.4 - Authorization Bypass
YITH WooCommerce Multi Vendor <= 3.8.0 - Reflected Cross-Site Scripting
Storefront Footer Text <= 1.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Affiliate Manager <= 2.8.6 - Admin+ SQL injection
Qwizcards <= 3.61 - Stored Cross-Site Scripting
School Management System – WPSchoolPress <= 2.1.16 - Stored Cross-Site Scripting
Pie Register <= 3.7.1.4 - Authentication Bypass
Print-O-Matic <= 2.0.2 - Admin+ Stored Cross-Site Scripting
School Management System – WPSchoolPress <= 2.1.9 - SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.