Media
CVE-2023-30852
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.071
Restablecer filtros
Media
CVE-2023-2340
Cross-site Scripting (XSS) in DataObject columns grid
Media
CVE-2023-2339
Cross-site Scripting (XSS) in DataObject Any Getter grid operator
Media
CVE-2023-2336
Path Traversal in Asset "import from server" option
Media
CVE-2023-2332
Cross-site Scripting (XSS) in Conditions tab of Pricing Rules
Media
CVE-2023-2328
Cross-site Scripting (XSS) in DataObjects QuantityValue Unit Definition
Media
CVE-2023-2327
Cross-site Scripting (XSS) in pimcore via DataObject Class date fields
Media
CVE-2023-2323
Cross-site Scripting (XSS) in Ecommerce Pricing Rules name field
Media
CVE-2023-2322
Cross-site Scripting (XSS) in Document Properties Parameter
Alta
CVE-2023-2338
SQL Injection in AssetController
Media
CVE-2023-2342
Cross-site Scripting (XSS) in Website Settings name field
Media
CVE-2023-2341
Cross-site Scripting (XSS) in Admin Login too many attempts notice
Media
CVE-2023-2343
Cross-site Scripting (XSS) in DataObject Classification Store
Alta
CVE-2023-30850
SQL Injection in Admin Translations API
Alta
CVE-2023-30849
SQL Injection in Translation Export API
Alta
CVE-2023-30848
SQL Injection in Admin Search Find API
Crítica
CVE-2020-36070
Remote code execution in Voyager
Media
CVE-2023-22728
Missing permission check of canView in GridFieldPrintButton
Media
CVE-2023-22729
Open redirect vulnerability on CMSSecurity relogin screen
Alta
ghsa-2fch-hv74-fgw9
Cross site scripting (XSS) in wwbn/avideo
Alta
CVE-2023-29200
Path traversal vulnerability in the file manager
Media
ghsa-wqm8-jx8r-8rcq
Cross-site scripting vulnerabilities in old version of bundled TinyMCE
Media
CVE-2023-30177
Cross Site Scripting in CraftCMS
Alta
CVE-2023-29530
HTTP Multiline Header Termination
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.