Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
WP Code Highlight.js <= 0.6.2 - Cross-Site Request Forgery to Cross-Site Scripting
Adaptive Images for WordPress <= 0.6.66 - Arbitrary File Deletion
Improper Restriction of XML External Entity Reference in ladon
OneSignal Web Push Notifications <=1.17.7 - Stored Cross-Site Scripting
Category Specific RSS Feed Subscription <= 2.0 - Cross-Site Request Forgery
Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection
All-in-One WP Migration <= 6.97 - Authenticated Stored Cross-Site Scripting
System.Management.Automation subject to bypass via script debugging
Drupal core - SA-CORE-2019-008
Deserialization of untrusted data in FasterXML jackson-databind
Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage
Coming Soon Page & Maintenance Mode <= 1.8.1 - Unauthenticated Settings Reset
Deserialization of Untrusted Data in jackson-databind
Cross-Site Scripting in @nuxt/devalue
Path Traversal in http-file-server
python-engineio vulnerable to Cross-Site Request Forgery (CSRF)
WordPress Ultra Simple Paypal Shopping Cart <= 4.4 - Cross-Site Request Forgery
Web Librarian <= 3.5.4 - SQL Injection
Coming Soon Page & Maintenance Mode <= 1.8.1 - Stored Cross Site Scripting
XML Injection in python-libnmap
Ad Inserter <= 2.4.21 - Authenticated Remote Code Execution
School Management System for Wordpress <= 56.0 - Cross-Site Request Forgery
WP Code Highlight.js <= 0.6.3 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.