Alta
CVE-2022-25275
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.071
Restablecer filtros
Media
CVE-2022-2400
Dompdf before v2.0.0 vulnerable to chroot check bypass
Media
ghsa-q37h-jhf3-85cj
Bypass of CMS Safe Mode Security Feature
Alta
CVE-2022-31158
LTI 1.3 Tool Library's Nonce Claim Value not validated against nonce value sent in Authentication Request before v5.0
Alta
CVE-2022-31157
LTI 1.3 Tool Library's function used to generate random nonces not sufficiently cryptographically complex before v5.0
Media
ghsa-6f85-3f8q-qc94
OroCommerce vulnerable to XSS when adding class name to Selector Manager on pages that use GrapeJS editor
Crítica
CVE-2022-35628
SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"
Alta
CVE-2022-24800
October CMS upload process vulnerable to RCE via Race Condition
Sin evaluar
drupal-contrib-2022-048
drupal/entity_print - SA-CONTRIB-2022-048
Media
CVE-2022-33155
Cross site scripting in ameos_tarteaucitron
Media
CVE-2022-33157
libconnect Extension for Typo3 Vulnerable to XSS
Alta
CVE-2022-31140
Valinor error messages leading to potential data exfiltration before v0.12.0
Media
CVE-2022-2368
Microweber before 1.2.21 allows attacker to bypass IP detection to brute-force password
Media
CVE-2022-2353
Microweber before v1.2.20 vulnerable to cross-site scripting
Alta
CVE-2022-33011
Known vulnerable to account takeover via host header injection attack in v1.3.1
Media
CVE-2022-30852
Known v1.3.1 contains Insecure Direct Object Reference
Media
CVE-2022-32115
Known vulnerable to code execution via SVG file in v1.3.1
Media
CVE-2022-31290
Known v1.3.1 Cross-site Scripting
Media
CVE-2022-32061
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting
Media
CVE-2022-32060
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings
Media
CVE-2022-2300
Cross-site Scripting in microweber
Media
CVE-2022-2280
Cross-site Scripting in microweber
Crítica
CVE-2022-33107
Deserialization of Untrusted Data in topthink/framework
Media
CVE-2022-2252
Open Redirect in microweber
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.