Alta
ghsa-hq76-662x-7mw4
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.407
Restablecer filtros
Media
CVE-2024-45232
"powermail" (powermail) Insecure Direct Object Reference (IDOR)
Alta
CVE-2024-45048
XXE in PHPSpreadsheet encoding is returned
Alta
CVE-2024-41964
Kirby has insufficient permission checks in the language settings
Media
CVE-2024-45233
Powermail TYPO3 extension Broken Access Control in the OutputController
Alta
CVE-2024-58383
Froxlor: /etc/pure-ftpd/db/mysql.conf is chmod 644 but contains <SQL_UNPRIVILEGED_PASSWORD>
Media
CVE-2024-43407
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability
Sin evaluar
CVE-2024-13266
drupal/responsive_menu - SA-CONTRIB-2024-030
Alta
CVE-2024-43372
Persistent Cross-site Scripting in eZ Platform Rich Text Field Type
Alta
CVE-2024-43369
Persistent Cross-site Scripting in Ibexa RichText Field Type
Media
CVE-2024-39406
Magento Open Source Path Traversal vulnerability
Alta
CVE-2024-39403
Magento Stored Cross-Site Scripting (XSS) vulnerability
Alta
CVE-2024-39399
Magento Path Traversal vulnerability
Alta
CVE-2024-39398
Magento does not properly restrict excessive authentication attempts
Media
CVE-2024-42357
Shopware vulnerable to blind SQL-injection in DAL aggregations
Alta
CVE-2024-42356
Shopware vulnerable to Server Side Template Injection in Twig using Context functions
Alta
CVE-2024-42355
Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag
Media
CVE-2024-42354
Shopware vulnerable to Improper Access Control with ManyToMany associations in store-api
Sin evaluar
CVE-2024-13265
drupal/opigno_learning_path - SA-CONTRIB-2024-029
Sin evaluar
CVE-2024-13264
drupal/opigno_module - SA-CONTRIB-2024-028
Media
CVE-2024-41381
Microweber Cross Site Scripting (XSS) vulnerability
Media
CVE-2024-41380
Microweber Cross Site Scripting (XSS) vulnerability
Baja
CVE-2024-41811
ipl/web's `ipl\Web\Common\CsrfCounterMeasure` is susceptible to CSRF
Media
ghsa-gc5h-6jx9-q2qh
eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.