Krytyczna
0a9b4c03-e7ec-48d6-87fe-67e8a5780703
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 647
Średnia
ba5d1bd4-da0d-43f4-b28f-4a4a2702b3b0
Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.6.9 - Cross-Site Scripting
Wysoka
CVE-2022-25898
JWS and JWT signature validation vulnerability with special characters
Niska
CVE-2022-30120
Cross site scripting in Concrete CMS
Krytyczna
CVE-2022-30117
Path traversal in Concrete CMS
Wysoka
CVE-2022-21829
Code injection in concrete CMS
Średnia
CVE-2022-33910
MantisBT XSS through crafted SVG documents in file_download.php
Wysoka
CVE-2022-21231
Prototype Pollution in deep-get-set
Średnia
CVE-2022-0899
Header Footer Code Manager <= 1.1.23 - Cross-Site Scripting
Nieoceniona
CVE-2022-34061
The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency
Nieoceniona
CVE-2022-34054
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and d
Nieoceniona
CVE-2022-33004
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and
Nieoceniona
CVE-2022-33000
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information an
Nieoceniona
CVE-2022-32998
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive us
Nieoceniona
CVE-2022-32997
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user inform
Nieoceniona
CVE-2022-32996
The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user informat
Nieoceniona
CVE-2022-30885
** Reserved ** The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2.
Średnia
CVE-2022-34305
Cross-site Scripting in Apache Tomcat
Średnia
CVE-2022-34208
Jenkins Beaker builder Plugin Missing Authorization vulnerability
Średnia
CVE-2022-34298
NT auth module vulnerability in OpenAM
Niska
CVE-2022-34213
Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text
Średnia
CVE-2022-34212
Missing permission check in Jenkins vRealize Orchestrator Plugin
Średnia
CVE-2022-34211
Cross-Site Request Forgery in Jenkins vRealize Orchestrator Plugin
Średnia
CVE-2022-34210
Missing permission check in Jenkins ThreadFix Plugin
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.