Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Unauthorized File Access in atompm
Malicious Package in requst
Malicious Package in shrugging-logging
Command Injection in soletta-dev-app
Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible
Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible
Affiliates Manager <= 2.7.7 - Cross-Site Scripting
10WebSocial <= 1.1.26 - Authenticated (Admin+) SQL Injection
Noo JobMonster <= 4.6.6 - Sensitive Information Disclosure via Directory Listing
Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145)
Users with SCRIPT right can execute arbitrary code in XWiki
The `size` option isn't honored after following a redirect in node-fetch
Lack of URL normalization may lead to authorization bypass when URL access rules are used
Invalid root may become trusted root in The Update Framework (TUF)
personnummer/python vulnerable to Improper Input Validation
personnummer/csharp vulnerable to Improper Input Validation
personnummer/php vulnerable to Improper Input Validation
WP Go Maps (formerly WP Google Maps) <= 7.11.17 - SQL Injection
Email Subscribers & Newsletters <= 4.5.5 - Unauthenticated Email Forgery
Love Travel 2.0 - 3.7 - Reflected Cross-Site Scripting
Love Travel 1.0 - 1.9 - Reflected Cross-Site Scripting and Cross-Frame Scripting
Custom Dashboard & Login Page – AGCA <= 6.5.4 - Reflected Cross-Site Scripting
LearnPress <= 3.2.7.2 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.