Media
CVE-2023-42399
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 5.032
Restablecer filtros
Alta
ghsa-22rr-f3p8-5gf8
Directus affected by VM2 sandbox escape vulnerability
Media
CVE-2023-41592
Froala Editor Cross-site Scripting vulnerability
Alta
CVE-2023-38507
Strapi Improper Rate Limiting vulnerability
Media
CVE-2023-37263
Strapi's field level permissions not being respected in relationship title
Media
CVE-2023-36472
Strapi may leak sensitive user information, user reset password, tokens via content-manager views
Alta
CVE-2023-39584
Hexo `include_code` has a path traversal
Media
CVE-2023-41646
Buttercup allows attackers to obtain the hash of the master password
Media
CVE-2023-39956
Electron vulnerable to out-of-package code execution when launched with arbitrary cwd
Media
CVE-2023-29198
Electron context isolation bypass via nested unserializable return value
Alta
CVE-2023-23623
Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled
Baja
ghsa-j5g3-5c8r-7qfx
Prevent logging invalid header values
Alta
CVE-2023-39663
MathJax Regular expression Denial of Service (ReDoS)
Media
CVE-2021-32050
MongoDB Driver may publish events containing authentication-related data
Media
CVE-2023-41037
Cleartext Signed Message Signature Spoofing in openpgp
Media
CVE-2023-41167
@webiny/react-rich-text-renderer vulnerable to insecure rendering of rich text content
Baja
ghsa-q4pp-j36h-3gqg
Minimal `basti` IAM Policy Allows Shell Access
Alta
CVE-2023-39141
webui-aria2 Path Traversal vulnerability
Alta
CVE-2023-40185
Shescape on Windows escaping may be bypassed in threaded context
Media
CVE-2023-40178
@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError
Media
CVE-2023-26140
@excalidraw/excalidraw Cross-site Scripting vulnerability
Media
CVE-2023-40028
Ghost vulnerable to arbitrary file read via symlinks in content import
Crítica
CVE-2023-40013
external-svg-loader Cross-site Scripting vulnerability
Media
CVE-2023-38687
Svelecte item names vulnerable to execution of arbitrary JavaScript
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.