Media
CVE-2024-8661
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 620
Restablecer filtros
Alta
CVE-2024-45048
XXE in PHPSpreadsheet encoding is returned
Media
ghsa-gc5h-6jx9-q2qh
eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Media
CVE-2024-39318
Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Crítica
CVE-2024-37906
Admidio has Blind SQL Injection in ecard_send.php
Media
CVE-2024-47069
Reflected Cross Site-Scripting (XSS) in Oveleon Cookiebar
Media
CVE-2024-36694
openCart Server-Side Template Injection (SSTI) vulnerability
Media
CVE-2024-32981
Silverstripe Framework has a Cross-site Scripting vulnerability with encoded payload
Media
CVE-2024-21515
Cross site scripting in opencart
Media
CVE-2024-21516
Cross site scripting in opencart
Media
CVE-2024-37160
Cross-site scripting (XSS) vulnerability in Description metadata
Alta
ghsa-hh95-5xm5-v8v7
TYPO3 CMS Possible Insecure Deserialization in Extbase Request Handling
Media
CVE-2024-34051
Reflected Cross-Site Scripting (XSS) in Dolibarr
Alta
ghsa-5h5v-m596-r6rf
TYPO3 Possible Insecure Deserialization in Extbase Request Handling
Media
ghsa-hhvj-mcrx-3vcf
silverstripe/framework has Cross-site Scripting vulnerability in page name
Alta
ghsa-2f46-4xjm-73x5
Passbolt API Stored XSS on first/last name during setup
Crítica
ghsa-qm5c-m76r-2hfr
Laravel RCE vulnerability in "cookie" session driver
Media
ghsa-7852-w36x-6mf6
Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior
Baja
ghsa-6wjw-qf87-fv5v
Laravel Encrypter Failure to decryption vulnerability
Crítica
ghsa-2ffv-r4r9-r8xr
Laravel RCE vulnerability in "cookie" session driver
Crítica
CVE-2024-34070
Blind XSS Leading to Froxlor Application Compromise
Media
CVE-2024-31828
Lavalite CMS Cross Site Scripting vulnerability
Alta
CVE-2024-32480
LibreNMS vulnerable to a Time-Based Blind SQL injection leads to database extraction
Alta
CVE-2024-23817
Dolibarr Application Home Page has HTML injection vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.