Sin evaluar
CVE-2024-13248
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.407
Restablecer filtros
Media
ghsa-gp6m-fq6h-cjcx
Magento LTS vulnerable to stored XSS in admin file form
Media
CVE-2024-27087
Kirby vulnerable to Cross-site scripting (XSS) in the link field "Custom" type
Media
CVE-2024-26481
Kirby vulnerable to self cross-site scripting (self-XSS) in the URL field
Media
CVE-2024-26483
Kirby vulnerable to unrestricted file upload of user avatar images
Crítica
ghsa-97m3-52wr-xvv2
Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE
Media
CVE-2024-25117
php-svg-lib lacks path validation on font through SVG inline styles
Alta
CVE-2024-25625
Pimcore Host Header Injection in user invitation link
Alta
CVE-2024-23830
MantisBT Host Header Injection vulnerability
Media
CVE-2024-25983
Authorization Bypass in moodle
Alta
CVE-2024-25298
Code injection in REDAXO
Media
CVE-2023-49508
YetiForceCRM Directory Traversal vulnerability
Alta
CVE-2024-20719
Magento Open Source allows Cross-Site Scripting (XSS)
Media
CVE-2024-20718
Magento Open Source allows Cross-Site Request Forgery (CSRF)
Sin evaluar
CVE-2024-13245
drupal/ckeditor_lts - SA-CONTRIB-2024-009
Alta
CVE-2024-22188
TYPO3 Install Tool vulnerable to Code Execution
Media
CVE-2023-30451
Path Traversal in TYPO3 File Abstraction Layer Storages
Media
CVE-2024-25120
TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme
Media
CVE-2024-25119
TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key
Media
CVE-2024-25118
TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords
Media
ghsa-6ccv-8fgf-cjpw
Drupal core Denial of Service vulnerability
Crítica
CVE-2024-25108
Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions
Alta
CVE-2024-24821
Composer code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php
Media
CVE-2024-24822
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.