Media
CVE-2024-29271
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Alta
CVE-2024-29180
Path traversal in webpack-dev-middleware
Media
CVE-2024-28635
Cross-site scripting in Survey Creator
Crítica
CVE-2024-29027
Server crashes on invalid Cloud Function or Cloud Job name
Alta
CVE-2024-28181
TurboBoost Commands vulnerable to arbitrary method invocation
Media
CVE-2024-28849
follow-redirects' Proxy-Authorization header kept across hosts
Media
CVE-2024-28239
URL Redirection to Untrusted Site in OAuth2/OpenID in directus
Baja
CVE-2024-28238
Session Token in URL in directus
Alta
CVE-2024-28121
StimulusReflex arbitrary method call
Media
CVE-2024-28176
jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
Media
CVE-2024-27927
RSSHub vulnerable to Server-Side Request Forgery
Media
CVE-2024-27926
RSSHub Cross-site Scripting vulnerability caused by internal media proxy
Crítica
CVE-2024-27922
HTTP Handling Vulnerability in the Bare server
Crítica
CVE-2024-27307
JSONata expression can pollute the "Object" prototype
Alta
CVE-2024-27303
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
Media
CVE-2024-25865
hexo-theme-anzhiyu Cross-site Scripting vulnerability
Media
CVE-2024-27296
Directus version number disclosure
Crítica
ghsa-4g2x-vq5p-5vj6
Budibase affected by VM2 Constructor Escape Vulnerability
Crítica
CVE-2024-27298
ZDI-CAN-19105: Parse Server literalizeRegexPart SQL Injection
Alta
CVE-2024-27295
Directus has MySQL accent insensitive email matching
Baja
ghsa-68c2-4mpx-qh95
Potential leakage of Sentry auth tokens by React Native SDK with Expo plugin
Media
CVE-2023-52555
mongo-express Cross-site Request Forgery vulnerability
Media
CVE-2024-22891
Nteract Remote Code Execution vulnerability
Media
CVE-2024-27094
OpenZeppelin Contracts base64 encoding may read from potentially dirty memory
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.