Alta
CVE-2011-1156
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2009-5065
feedparser Cross-site Scripting vulnerability
Alta
CVE-2011-4957
WordPress Core < 3.1.1 - Denial of Service
Media
CVE-2011-4956
WordPress Core <= 3.1 - Cross-Site Scripting
Alta
CVE-2011-1669
WP Custom Pages <= 0.5.0.1 - Path Traversal
Crítica
CVE-2011-4342
BackWPup <= 1.7.1 - Remote File Inclusion
Alta
CVE-2011-0759
WP-reCAPTCHA <= 2.9.8.2 - Multiple Cross-Site Request Forgery
Alta
CVE-2011-0760
WP Related Posts <= 1.0 - Cross-Site Request Forgery
Media
CVE-2011-5304
SodaHead Polls < 2.0.4 - Multiple Cross-Site Scripting
Alta
CVE-2011-5208
BackWPup – WordPress Backup Plugin < 1.4.1 - Directory Traversal
Alta
1e4d03f0-408c-47da-bae9-38614603f02b
SimpleDark <= 1.2.11 - Cross-Site Scripting
Media
f34383c7-1d98-4f8a-aa43-542fe2d9a567
Starbox Voting <= 2.0.4 - Full Path Disclosure
Media
f2e6f09e-0ebc-47e3-84f3-9aede2781f42
GD Star Rating <= 1.9.22 - Cross-Site Scripting
Media
CVE-2011-5307
Photosmash Plugin < 1.0.5 - Cross-Site Scripting
Crítica
CVE-2011-1047
WP Forum Server <= 1.6.5 - SQL Injection
Crítica
CVE-2011-10041
Uploadify <= 1.0 - Arbitrary File Upload
Alta
CVE-2013-1916
User Photo <= 0.9.4 - Arbitrary File Upload
Alta
CVE-2011-0696
Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site requ
Media
CVE-2011-0697
Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file u
Crítica
CVE-2011-0698
Directory traversal in Django
Crítica
CVE-2011-5308
CDN Vote < 0.4.2 - SQL Injection
Media
CVE-2011-0701
WordPress Core < 3.0.5 - Improper Authorization to Information Disclosure
Alta
CVE-2011-3818
WordPress Core 2.9.2 and 3.0.4 - Sensitive Information Disclosure
Media
CVE-2011-0740
RSS Feed Reader <= 0.1 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.