Media
CVE-2023-2516
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.071
Restablecer filtros
Alta
CVE-2023-2550
Cross Site Scripting in thorsten/phpmyfaq
Media
CVE-2023-2427
Cross Site Scripting in thorsten/phpmyfaq
Crítica
CVE-2023-2531
AzuraCast missing brute force prevention
Sin evaluar
drupal-contrib-2023-014
drupal/s3fs - SA-CONTRIB-2023-014
Media
CVE-2023-30943
Moodle External Control of File Name or Path vulnerability
Alta
CVE-2023-30944
Moodle SQL Injection vulnerability
Media
CVE-2023-29918
RosarioSIS vulnerable to CSV Injection
Media
CVE-2023-30855
Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
Alta
CVE-2023-30860
WWBN/AVideo stored XSS vulnerability leads to takeover of any user's account, including admin's account
Media
CVE-2023-2361
Cross-site Scripting (XSS) in pimcore
Media
CVE-2023-2429
phpMyFAQ Improper Access Control vulnerability
Media
CVE-2023-2428
phpMyFAQ vulnerable to Stored Cross-site Scripting
Media
CVE-2023-28477
Stored cross site scripting on API integration
Baja
CVE-2023-28820
Stored cross site scripting in RSS displayer
Baja
CVE-2023-28819
Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names
Media
CVE-2023-28821
Missing rate limit for password resets
Media
CVE-2023-28475
Reflected cross site scripting
Media
CVE-2023-28472
Concrete CMS missing secure cookie parameters
Media
CVE-2023-28471
Stored cross site scripting via container name
Media
CVE-2023-28474
Stored cross site scripting on saved presets
Media
CVE-2023-28476
Stored cross site scripting on tags
Crítica
CVE-2023-28473
Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
Alta
CVE-2023-30854
Remote code injection in wwbn/avideo
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.