Media
CVE-2019-19540
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2019-19542
ListingPro - WordPress Directory & Listing Theme < 2.0.14.5 - Stored Cross-Site Scripting
Media
CVE-2019-10195
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This in
Alta
CVE-2019-19275
typed-ast Out-of-bounds Read
Alta
CVE-2019-19274
typed-ast Out-of-bounds Read
Alta
CVE-2019-6027
WP Spell Check <= 7.1.9 - Cross-Site Request Forgery
Alta
CVE-2019-10217
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Alta
CVE-2012-5578
Incorrect Default Permissions in keyring
Media
CVE-2019-16763
Pannellum Cross-Site Scripting due to data not being sanitized for URIs or vbscript
Media
CVE-2015-5694
Designate does not enforce the DNS protocol limit concerning record set sizes
Alta
ghsa-9xr8-8hmc-389f
Cross-Site Scripting in vant
Media
CVE-2019-12417
Apache Airflow vulnerable to XSS and local file disclosure
Media
CVE-2014-1938
Link Following in rply
Crítica
CVE-2019-10766
SQL Injection in usmanhalalit/pixie
Alta
CVE-2019-10768
angular Prototype Pollution vulnerability
Alta
CVE-2019-12331
XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue
Alta
CVE-2018-19277
XXE in PHPSpreadsheet due to encoding issue
Alta
CVE-2018-11768
user/group information can be corrupted across storing in fsimage and reading back from fsimage
Alta
CVE-2019-10764
Timing attacks might allow practical recovery of the long-term private key
Crítica
CVE-2019-10212
Potential to access user credentials from the log files when debug logging enabled
Alta
CVE-2016-6485
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
Alta
CVE-2019-19979
WP Maintenance <= 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Crítica
CVE-2019-10910
Symfony Service IDs Allow Injection
Alta
CVE-2019-0207
Path traversal attack on Windows platforms
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.