Media
3003bd3b-aee5-4bac-9a62-e747f544d2bd
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Sin evaluar
465
Myportfolio - SQL Injection
Sin evaluar
CVE-2017-8359
Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.
Media
CVE-2017-18559
cformsII <= 14.13.2 - Cross-Site Scripting
Crítica
cc550fd9-c332-4a40-b4a9-166d5ffebc76
My Geo Posts Free <= 1.2 - PHP Object Injection
Crítica
CVE-2017-18605
Gravitate QA Tracker <= 1.2.1 - Object Injection
Crítica
4b40e33b-4aa8-4378-b044-a8a636d34f73
Referrer Detector <= 4.2.1.0 - PHP Object Injection
Crítica
CVE-2017-18604
SiteBuilder Dynamic Components <= 1.0 - PHP Object Injection
Crítica
17ccf3f5-ac71-4827-bf11-9a5199f8752e
AJAX Random Posts <= 0.3.3 - PHP Object Injection
Crítica
fc6dcf93-7f1f-4e87-8ba5-852d23b1f0fd
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Timing Attack
Crítica
f4703ca7-0677-4128-b9b7-31132ff1804d
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - CSV Injection
Alta
CVE-2017-18607
Avada <= 5.1.4 - Cross-Site Request Forgery
Media
CVE-2017-18606
Avada <= 5.1.4 - Stored Cross-Site Scripting
Crítica
CVE-2017-1002016
flickr-picture-backup <= 0.7 - Arbitrary file upload
Media
35293a82-b535-47a2-8a34-e54fe836ca89
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Reflected Cross-Site Scripting
Media
CVE-2016-10706
Jetpack <= 4.0.2 - Cross-Site Scripting
Crítica
CVE-2016-6903
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
Crítica
CVE-2016-6902
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
Alta
CVE-2017-18570
cformsII <= 14.12.3 - Authenticated SQL Injection
Crítica
CVE-2017-18592
WC Catalog Enquiry <= 3.0.5 - Arbitrary File Upload
Media
CVE-2017-20008
myCred Plugin <= 1.7.7 - Reflected Cross-Site Scripting
Media
CVE-2017-18498
Simple Job Board <= 2.4.4 - Reflected Cross-Site Scripting
Media
CVE-2017-18608
Spot.IM Comments < 4.0.4 - Cross-Site Scripting
Media
041807ab-9354-4438-8e8a-77140f41eedb
Ultimate Form Builder Lite <= 1.3.2 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.