Alta
CVE-2023-27159
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.216
Restablecer filtros
Media
CVE-2023-28332
Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional
Media
CVE-2023-28438
Pimcore vulnerable to improper quoting of filters in Custom Reports
Crítica
CVE-2023-28115
PHAR deserialization allowing remote code execution
Media
CVE-2023-27577
Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files
Media
CVE-2023-25170
Possible CSRF token fixation (CWE-352)
Alta
CVE-2021-36396
Moodle vulnerable to Server-Side Request Forgery
Alta
CVE-2023-24814
TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering
Media
CVE-2018-25080
Cross-site Scripting in MobileDetect
Media
CVE-2022-24895
Symfony vulnerable to Session Fixation of CSRF tokens
Media
CVE-2016-15022
CImage Cross-site Scripting vulnerability
Alta
CVE-2021-41143
Fix for arbitrary file deletion in customer media allows for remote code execution
Crítica
CVE-2021-26642
XpressEngine vulnerable to Unrestricted Upload of File with Dangerous Type
Media
ghsa-m95x-m25c-w9mp
XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
Media
ghsa-7vcx-v65q-9wpg
XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument
Media
CVE-2023-54395
PocketMine-MP vulnerable to denial-of-service by sending large modal form responses
Alta
CVE-2023-54396
PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash
Crítica
CVE-2017-20157
Ariadne Component Library vulnerable to Server-Side Request Forgery
Alta
CVE-2022-23556
CodeIgniter4 allows spoofing of IP address when using proxy
Media
CVE-2022-23500
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Media
CVE-2022-34297
Yii2 Gii Cross-site Scripting vulnerability
Alta
CVE-2022-46157
Akeneo PIM Community Edition vulnerable to remote php code execution
Alta
ghsa-3fgr-xjr6-xqm8
code injection in phpxmlrpc/phpxmlrpc
Crítica
CVE-2022-45152
Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.