Alta
CVE-2023-43646
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Alta
CVE-2023-31716
FUXA vulnerable to Local File Inclusion
Crítica
CVE-2023-31719
FUXA SQL Injection vulnerability
Alta
CVE-2023-31718
FUXA local file inclusion vulnerability
Alta
CVE-2023-31717
FUXA SQL Injection vulnerability
Crítica
CVE-2023-42810
systeminformation SSID Command Injection Vulnerability
Media
CVE-2023-5104
Improper Input Validation in nocodb
Media
CVE-2023-26144
graphql Uncontrolled Resource Consumption vulnerability
Media
CVE-2023-26143
blamer vulnerable to Arbitrary Argument Injection via the blameByFile() API
Media
CVE-2023-42399
Jodit Editor vulnerable to cross-site scripting
Crítica
CVE-2023-33831
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA
Alta
ghsa-22rr-f3p8-5gf8
Directus affected by VM2 sandbox escape vulnerability
Media
CVE-2023-41592
Froala Editor Cross-site Scripting vulnerability
Alta
CVE-2023-38507
Strapi Improper Rate Limiting vulnerability
Media
CVE-2023-37263
Strapi's field level permissions not being respected in relationship title
Media
CVE-2023-36472
Strapi may leak sensitive user information, user reset password, tokens via content-manager views
Alta
Explotada en ataques
CVE-2023-4863
libwebp: OOB write in BuildHuffmanTable
Alta
CVE-2023-39584
Hexo `include_code` has a path traversal
Media
CVE-2023-41646
Buttercup allows attackers to obtain the hash of the master password
Media
CVE-2023-39956
Electron vulnerable to out-of-package code execution when launched with arbitrary cwd
Media
CVE-2023-29198
Electron context isolation bypass via nested unserializable return value
Alta
CVE-2023-23623
Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled
Alta
CVE-2023-41058
Trigger `beforeFind` not invoked in internal query pipeline when fetching pointer
Alta
CVE-2023-41049
Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.