Media
CVE-2023-23617
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.405
Restablecer filtros
Crítica
CVE-2020-22452
phpmyadmin contains SQL Injection vulnerability
Media
CVE-2021-21395
magento-lts Reset Password not protected against well-timed CSRF
Media
ghsa-xwhj-pqcg-8rcr
CakePHP vulnerable to Cross-site Scripting in some development error pages
Media
ghsa-j9q2-f9q7-jhgq
CakePHP SecurityComponent cross form submission issue
Media
CVE-2023-22734
Shopware has Improper Input Validation issue in newsletter subscription
Media
ghsa-829q-v5g8-hhxc
CakePHP has incorrect Cross-Site Request Forgery validation
Baja
CVE-2023-22733
Shopware's log module vulnerable to Improper Output Neutralization
Sin evaluar
drupal-contrib-2023-003
drupal/media_library_block - SA-CONTRIB-2023-003
Crítica
CVE-2023-22731
Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views
Media
CVE-2023-22730
Shopware vulnerable to Improper Input Validation of Clearance sale in cart
Media
CVE-2010-10008
simplesamlphp-module-openidprovider Cross Site Scripting vulnerability
Media
ghsa-m95x-m25c-w9mp
XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
Baja
CVE-2023-22489
Any Flarum user including unactivated can reply in public discussions whose first post was permanently deleted
Media
CVE-2023-22488
Flarum notifications can leak restricted content
Alta
CVE-2023-22487
Flarum post mentions can be used to read any post on the forum without access control
Alta
CVE-2023-54396
PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash
Alta
CVE-2015-10012
FrameworkUserBundle Generates Error Message Containing Sensitive Information
Media
CVE-2010-10002
SimpleSAMLphp simplesamlphp-module-openid
Media
CVE-2017-20158
Yii2 FileAPI Widget vulnerable to Cross-site Scripting
Alta
CVE-2022-46170
CodeIgniter4 Potential Session Handlers Vulnerability
Alta
CVE-2022-23556
CodeIgniter4 allows spoofing of IP address when using proxy
Media
CVE-2022-4647
Microweber vulnerable to Stored Cross-Site Scripting
Media
CVE-2022-4617
Microweber vulnerable to Reflected Cross-site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.