Media
CVE-2024-45060
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.216
Restablecer filtros
Alta
CVE-2024-45293
PHPSpreadsheet Library < 2.3.0 - XXE Injection
Media
CVE-2024-47765
Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
Media
CVE-2024-47617
Injection of arbitrary HTML/JavaScript code through the media download URL
Media
CVE-2024-47525
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" feature
Baja
CVE-2024-47526
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature
Media
CVE-2024-47527
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature
Alta
CVE-2024-45398
Contao affected by remote command execution through file upload
Media
CVE-2024-43407
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability
Alta
CVE-2024-42485
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
Alta
CVE-2024-42356
Shopware vulnerable to Server Side Template Injection in Twig using Context functions
Alta
CVE-2024-42355
Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag
Alta
CVE-2024-38909
Studio 42 elFinder vulnerable to Incorrect Access Control
Media
CVE-2024-41109
Pimcore vulnerable to disclosure of system and database information behind /admin firewall
Crítica
CVE-2024-38529
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
Media
CVE-2024-36694
openCart Server-Side Template Injection (SSTI) vulnerability
Media
CVE-2024-32981
Silverstripe Framework has a Cross-site Scripting vulnerability with encoded payload
Media
CVE-2024-39912
The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames
Media
CVE-2024-39899
PrivateBin allows shortening of URLs for other domains
Media
CVE-2024-6524
ShopXO Server-Side Request Forgery Vulnerability
Media
CVE-2024-38275
Moodle HTTP authorization header is preserved between "emulated redirects"
Media
CVE-2024-34111
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
Alta
ghsa-rcm4-jv5g-wccm
zfr authentication adapter did not verify validity of tokens
Crítica
ghsa-v42g-7q2x-cw32
Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.