Alta
CVE-2023-46942
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Crítica
CVE-2024-22206
@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)
Media
CVE-2024-21668
react-native-mmkv Insertion of Sensitive Information into Log File vulnerability
Media
CVE-2023-50974
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system
Media
CVE-2023-51701
@fastify/reply-from JSON Content-Type parsing confusion
Alta
CVE-2023-6944
@backstage/backend-app-api leaks GitLab access tokens
Crítica
CVE-2023-7080
Arbitrary remote code execution within `wrangler dev` Workers sandbox
Media
CVE-2023-7079
Arbitrary remote file read in Wrangler dev server
Alta
CVE-2023-39655
CouchAuth host header injection vulnerability leaks the password reset token
Crítica
CVE-2023-46308
plotly.js prototype pollution vulnerability
Media
CVE-2023-26159
Follow Redirects improperly handles URLs in the url.parse() function
Media
CVE-2023-50550
Layui cross-site scripting (XSS) vulnerability
Alta
CVE-2023-7078
Miniflare vulnerable to Server-Side Request Forgery (SSRF)
Alta
CVE-2023-52079
msgpackr's conversion of property names to strings can trigger infinite recursion
Media
CVE-2023-50481
blinksocks has weak encryption algorithms
Crítica
CVE-2023-50475
bsock uses weak hashing algorithms
Crítica
CVE-2019-25158
Pedroetb TTS-API OS Command Injection
Alta
CVE-2023-50249
Sentry's Astro SDK vulnerable to ReDoS
Alta
CVE-2023-50728
Unauthenticated Denial of Service in the octokit/webhooks library
Crítica
ghsa-cfxh-frx4-9gjg
Cross-site Scripting in @spscommerce/ds-react
Media
CVE-2023-50710
Named path parameters can be overridden in TrieRouter
Media
CVE-2023-50709
Cube API denial of service attack
Crítica
CVE-2023-49583
Escalation of privileges in @sap/xssec
Media
CVE-2023-49804
Password Change Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.