Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Houzez <= 1.8.3 - Reflected Cross-Site Scripting
WooCommerce - Store Exporter <= 2.3.1 - CSV Injection
Stored XSS in Apache Atlas
XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes
The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks
PrestaShop gamification module ZIP archives were vulnerable from CVE-2017-9841
PrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841
Minimal Coming Soon & Maintenance Mode <= 2.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting and Setting Changes
Ultimate Category Excluder <= 1.1 - Cross-Site Request Forgery
Minimal Coming Soon & Maintenance Mode <= 2.16 - Missing Authorization to Export Settings/Theme Change
PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
cookie-signature Timing Attack
Deserialization of Untrusted Data in Log4j
Deserialization of Untrusted Data in Log4j
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.13 - Cross-Site Scripting via post_title
Ultimate FAQ <= 1.8.29 - Reflected Cross-Site Scripting
Uncontrolled Resource Consumption in Pillow
WP Simple Spreadsheet Fetcher for Google < 0.3.7 - Cross-Site Request Forgery
Elegant Themes Divi 3.23 - 4.0.9, Divi Extra 2.23 - 4.0.9, Divi Builder 2.23 - 4.0.9 - PHP Code Injection
Out-of-bounds Read in Pillow
PCX P mode buffer overflow in Pillow
Buffer Copy without Checking Size of Input in Pillow
Integer overflow in Pillow
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.