Baja
CVE-2023-52085
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.216
Restablecer filtros
Baja
CVE-2023-52083
Winter CMS Stored XSS through privileged upload of Media Manager file followed by renaming
Media
CVE-2023-48652
Concrete CMS Cross Site Request Forgery (CSRF)
Baja
CVE-2023-7037
Authenticated Blind SSRF in automad/automad
Media
CVE-2023-50262
Denial of service caused by infinite recursion when parsing SVG images
Media
CVE-2023-50251
Denial of service caused by infinite recursion when parsing SVG document
Media
ghsa-7mc6-x925-7qvx
Test code in published microsoft-graph-beta package exposes phpinfo()
Media
CVE-2023-49283
Test code in published microsoft-graph-core package exposes phpinfo()
Media
CVE-2023-49282
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
Crítica
CVE-2023-6026
PHPMemcachedAdmin Path Traversal vulnerability
Media
CVE-2023-46745
LibreNMS vulnerable to rate limiting bypass on login page
Media
ghsa-w98g-5fmx-wm4x
pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory
Media
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
Media
CVE-2023-47636
pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document
Media
CVE-2023-5550
Moodle Code Injection vulnerability
Media
CVE-2023-47109
PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block
Alta
CVE-2023-46725
FoodCoopShop Server-Side Request Forgery vulnerability
Alta
CVE-2023-46245
Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
Media
CVE-2023-43648
baserCMS Directory Traversal vulnerability in Form submission data management Feature
Media
CVE-2023-29009
baserCMS Cross-site Scripting Vulnerability in Favorites Feature
Crítica
CVE-2023-43661
Cachet vulnerable to Authenticated Remote Code Execution
Media
CVE-2023-26366
Magento Open Source allows Server-Side Request Forgery (SSRF)
Alta
CVE-2023-43655
Composer Remote Code Execution vulnerability via web-accessible composer.phar
Alta
CVE-2023-38877
Economizzer host header injection vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.