Alta
CVE-2020-35653
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Alta
CVE-2021-4383
WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Content Injection
Media
CVE-2021-4378
WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2021-4371
WP Quick FrontEnd Editor <= 5.5 - Authenticated Settings Change
Media
CVE-2021-24157
Orbit Fox by ThemeIsle <= 2.10.2 - Authenticated (Contributor+) Stored Cross Site Scripting
Media
CVE-2021-4363
WP Quick FrontEnd Editor <= 5.5 - Reflected Cross-Site Scripting
Alta
CVE-2021-21241
CSRF can expose users authentication token
Alta
CVE-2020-25659
RSA decryption vulnerable to Bleichenbacher timing vulnerability
Alta
CVE-2020-13922
Incorrect Default Permissions in Apache DolphinScheduler
Alta
CVE-2021-3116
Logic error in authentication in proxy.py
Media
CVE-2021-3124
Custom Global Variables <= 1.0.5 - Stored Cross-Site Scripting via 'name'
Crítica
CVE-2020-29045
Five Star Restaurant Menu <= 2.2.0 - Unauthenticated Arbitrary Object Deserialization leading to Remote Code Execution
Crítica
03be4344-d388-4357-8a2e-c3b9c8b83017
e-signature < 1.5.6.8 - Unauthenticated Remote Code Execution
Media
234a847b-3ffa-4c5c-9bba-39df227de0bc
Tutor LMS <= 1.9.12 - Reflected Cross-Site Scripting
Crítica
CVE-2020-28468
pwntools Server-Side Template Injection (SSTI) vulnerability
Crítica
e30fe90a-774c-41ba-b28e-8b8128fd72cc
Modal Survey <= 2.0.1.8 - PHP Object Injection
Alta
d0215e53-0394-4845-93e4-463cd5642fb3
Modal Survey < 2.0.1.8.2 - Authorization Bypass
Alta
Explotada en ataques
CVE-2020-17519
Path Traversal in Apache Flink
Media
CVE-2024-21911
Cross-site scripting vulnerability in TinyMCE
Baja
ghsa-h96f-fc7c-9r55
Regex denial of service vulnerability in codesample plugin
Alta
CVE-2021-21236
Regular Expression Denial of Service in CairoSVG
Crítica
CVE-2020-26759
Arbitrary code execution in clickhouse-driver
Media
CVE-2021-47984
WP24 Domain Check <= 1.6.2 - Cross-Site Scripting
Alta
CVE-2022-21661
WordPress Core < 5.8.3 - SQL Injection via WP_Query
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.