Media
CVE-2024-6524
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.221
Restablecer filtros
Media
CVE-2024-38275
Moodle HTTP authorization header is preserved between "emulated redirects"
Media
CVE-2024-34111
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
Alta
ghsa-rcm4-jv5g-wccm
zfr authentication adapter did not verify validity of tokens
Crítica
ghsa-v42g-7q2x-cw32
Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
Media
ghsa-fq4p-86hh-42v9
Zend-Diactoros URL Rewrite vulnerability
Alta
ghsa-jmmp-vh96-78rm
Zend-Feed URL Rewrite vulnerability
Alta
ghsa-cg8w-5jrc-675g
Zend-HTTP URL Rewrite vulnerability
Media
ghsa-hg35-vqp3-fv39
ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings
Media
ghsa-fh7r-58q4-6387
Zendframework URL Rewrite vulnerability
Media
ghsa-mg7h-9qfx-4r83
ZendFramework Potential Proxy Injection Vulnerabilities
Alta
ghsa-xffp-6w68-4775
Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`
Media
ghsa-f3wf-q4fj-3gxf
TYPO3 Denial of Service in Online Media Asset Handling
Media
ghsa-8m6j-p5jv-v69w
TYPO3 Cross-Site Scripting in Online Media Asset Rendering
Alta
ghsa-8h4m-r4wm-xj7r
TYPO3 Arbitrary Code Execution via File List Module
Media
ghsa-g7hw-jh4p-75wr
TYPO3 Cross-Site Scripting in Filelist Module
Media
ghsa-2p4f-vc9q-r5vp
Typo3 Arbitrary file upload and XML External Entity processing
Alta
ghsa-4542-p56h-8xww
Cross-Site Scripting (XSS) vulnerabilities in Neos
Crítica
ghsa-67wg-6j7r-mqh8
Arbitrary Code Execution in TYPO3 CMS
Alta
CVE-2024-37295
Remote code execution in web server context
Alta
CVE-2024-32871
Flooding Server with Thumbnail files
Alta
CVE-2024-4990
Unsafe Reflection in base Component class in yiisoft/yii2
Alta
CVE-2024-34005
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Media
CVE-2024-34004
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.