Alta
CVE-2023-32679
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.071
Restablecer filtros
Crítica
CVE-2023-32692
Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4
Media
CVE-2023-2666
Froxlor vulnerable to Allocation of Resources Without Limits or Throttling
Alta
CVE-2023-2665
RosarioSIS Stores Sensitive Data in a Mechanism without Access Control
Media
CVE-2023-30124
LavaLite vulnerable to Cross Site Scripting
Media
CVE-2023-26044
ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limits
Alta
CVE-2023-2756
pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment query
Media
CVE-2023-2752
phpMyFAQ vulnerable to stored Cross-site Scripting
Media
CVE-2023-2753
phpMyFAQ vulnerable to stored Cross-site Scripting
Media
CVE-2021-27131
Moodle vulnerable to stored Cross-site Scripting
Media
CVE-2023-2730
Pimcore Cross-site Scripting vulnerability
Alta
CVE-2023-32073
WWBN AVideo command injection vulnerability
Alta
CVE-2023-30130
CraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameter
Crítica
CVE-2023-27238
LavaLite vulnerable to web cache poisoning
Media
CVE-2023-27237
LavaLite CMS vulnerable to host header injection attack
Media
CVE-2023-2630
Pimcore Cross-site Scripting (XSS) vulnerability in Admin Translations
Alta
CVE-2023-2629
Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection
Media
CVE-2023-2616
Pimcore Cross-site Scripting (XSS) in Static Routes name field
Media
CVE-2023-32075
Pimcore vulnerable to Business Logic Errors via Customer automation rules
Media
CVE-2023-2614
Pimcore Cross-site Scripting (XSS) in name field of Custom Reports
Media
CVE-2023-2615
Pimcore Cross-site Scripting (XSS) in Predefined Properties delete
Media
ghsa-r3fg-3r88-6x3f
Ibexa User Settings are accessible on the front-end for anonymous user
Alta
CVE-2023-2591
teampass vulnerable to code injection
Media
CVE-2023-31144
craftcms/cms vulnerable to cross site scripting in RSS feed widget
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.