Media
ghsa-7v7m-pcw5-h3cg
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.216
Restablecer filtros
Media
ghsa-ww6p-q26w-fr6m
phpxmlrpc/extra XSS in class documenting_xmlrpc_server
Media
ghsa-qm5v-pj64-852j
Passbolt Api Tabnabbing when opening URI with menu "Open URI in a new tab"
Alta
ghsa-2f46-4xjm-73x5
Passbolt API Stored XSS on first/last name during setup
Alta
ghsa-cv5c-2qv5-w2m2
Passbolt Api Remote code execution
Alta
ghsa-6cj3-rc4p-f38f
Cross-site Scripting vulnerabilities in Neos
Media
ghsa-5vv7-j593-mgjc
Neos Flow Arbitrary file upload and XML External Entity processing
Alta
ghsa-wq8p-mqvg-2p5h
laravel framework SQL Injection via limit and offset functions
Alta
ghsa-2gq2-m628-33xp
gregwar/rst Local File Inclusion Vulnerability
Alta
ghsa-9895-26wr-4fgv
EZsystems Remote code execution in file uploads
Media
ghsa-pqjm-xcp8-wgmm
Ez Platform and Legacy are prone to an insecure interpretation of PHP/PHAR uploads
Alta
ghsa-3vwr-jj4f-h98x
eZ Publish Remote code execution in file uploads
Crítica
ghsa-wxxw-5gq6-j2g5
contao/core Insufficient input validation allows for code injection and remote execution
Alta
CVE-2024-34082
Grav Vulnerable to Arbitrary File Read to Account Takeover
Media
CVE-2024-34358
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController
Crítica
CVE-2024-4825
Cockpit CMS contains an arbitrary file upload vulenrability
Crítica
CVE-2024-34070
Blind XSS Leading to Froxlor Application Compromise
Alta
CVE-2024-23817
Dolibarr Application Home Page has HTML injection vulnerability
Media
CVE-2022-25777
Mautic: MST-48 Server-Side Request Forgery in Asset section
Alta
CVE-2024-2653
AMPHP Denial of Service via HTTP/2 CONTINUATION Frames
Crítica
CVE-2021-27312
Gleez Cms Server Side Request Forgery (SSRF) vulnerability
Alta
CVE-2024-29686
Winter CMS Server-Side Template Injection (SSTI) vulnerability
Alta
CVE-2024-29904
CodeIgniter4 DoS Vulnerability
Alta
CVE-2024-28107
phpMyFAQ SQL injections at insertentry & saveentry
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.