Alta
CVE-2023-2315
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.216
Restablecer filtros
Alta
CVE-2015-8371
Composer allows cache poisoning from other projects built on the same host
Alta
CVE-2023-54390
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)
Alta
CVE-2023-54355
PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey
Alta
CVE-2023-41879
Magento LTS's guest order "protect code" can be brute-forced too easily
Crítica
CVE-2023-41330
Snappy PHAR deserialization vulnerability
Alta
CVE-2023-40033
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
Media
CVE-2023-39530
PrestaShop file deletion via CustomerMessage
Media
CVE-2023-39529
PrestaShop file deletion via attachment API
Crítica
CVE-2023-39528
Reading a file through path traversal & Remote Code Execution via unsafe deserialization
Crítica
CVE-2023-29689
PyroCMS remote code execution vulnerability
Media
CVE-2023-38708
Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
Media
CVE-2023-38490
XML External Entity (XXE) vulnerability in the XML data handler
Media
CVE-2023-38491
Cross-site scripting (XSS) from MIME type auto-detection of uploaded files
Media
CVE-2023-38492
Denial of service from unlimited password lengths
Alta
CVE-2023-37897
grav Server-side Template Injection (SSTI) mitigation bypass
Alta
CVE-2023-54392
PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket
Baja
CVE-2023-37269
Winter CMS stored XSS through privileged upload of SVG file
Alta
CVE-2023-37260
league/oauth2-server key exposed in exception message when passing as a string and providing an invalid pass phrase
Media
CVE-2023-23684
WPGraphQL <= 1.14.5 - Authenticated (Editor+) Server-Side Request Forgery
Alta
CVE-2023-35133
Moodle vulnerable to Server Side Request Forgery
Alta
CVE-2023-34448
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Alta
CVE-2023-34253
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
Alta
CVE-2023-34252
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.