Media
CVE-2019-20445
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
b3bae191-9395-481c-93bf-b17cf5f87271
Chained Quiz <= 1.1.9 -Stored Cross-Site Scripting
Media
CVE-2020-5243
Denial of Service in uap-core when processing crafted User-Agent strings
Media
23f1b1da-2ac0-49c1-bb32-2fe2cfd56192
Real Testimonials <= 2.1.6 - Authenticated Stored Cross-Site Scripting
Alta
CVE-2020-7597
codecov NPM module allows remote attackers to execute arbitrary commands
Sin evaluar
drupal-contrib-2020-004
drupal/profile - SA-CONTRIB-2020-004
Alta
CVE-2019-10790
TaffyDB can allow access to any data items in the DB
Crítica
CVE-2019-20477
Deserialization of Untrusted Data in PyYAML
Media
6aae5b1d-9b84-4628-b0b6-7b39054e08a0
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks
Media
CVE-2020-9003
Modula Image Gallery <= 2.2.4 - Authenticated Stored Cross-Site Scripting
Alta
52d390e0-95ca-4570-8d4c-f679ee86ffea
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection
Media
404aabc5-1ff4-492d-8cab-4b83eb68157a
WP All Import Pro < 4.1.1 - Reflected Cross Site Scripting
Alta
CVE-2020-5237
Relative Path Traversal (CWE-23) in chunked uploads in oneup/uploader-bundle
Media
CVE-2020-10385
Contact Form by WPForms <= 1.5.8.2 - Stored Cross-Site Scripting
Alta
CVE-2020-5530
Easy Property Listings < 3.4 - Cross-Site Request Forgery
Alta
66ddb0f7-4d4c-4c4f-b766-9a07609cd0e5
Fruitful < 3.8.1 - Reflected Cross-Site Scripting
Crítica
CVE-2020-9043
wpCentral <= 1.5.0 - Improper Access Control to Privilege Escalation
Crítica
CVE-2020-36837
ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset
Crítica
CVE-2020-9006
Popup Builder 2.2.8 - 2.6.7.6 - PHP Object Injection
Alta
CVE-2019-10773
Yarn Improper link resolution before file access (Link Following)
Crítica
CVE-2019-10777
OS command injection in aws-lambda
Crítica
CVE-2019-10776
OS command injection in git-diff-apply
Crítica
CVE-2019-15597
Command Injection in node-df
Media
CVE-2019-14863
AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributes
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.