Media
CVE-2024-34343
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 920
Restablecer filtros
Media
CVE-2024-39918
@jmondi/url-to-png contains a Path Traversal vulnerability
Alta
CVE-2024-39895
Directus GraphQL Field Duplication Denial of Service (DoS)
Media
CVE-2024-38527
Cross-site Scripting in ZenUML
Alta
CVE-2024-34065
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
Alta
CVE-2024-36120
javascript-deobfuscator crafted payload can lead to code execution
Media
CVE-2024-4067
Regular Expression Denial of Service (ReDoS) in micromatch
Alta
CVE-2023-49781
NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue
Crítica
CVE-2024-32962
xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing
Media
CVE-2024-29504
Summernote vulnerable to cross-site scripting
Media
CVE-2024-29881
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
Media
CVE-2024-28863
Denial of service while parsing a tar file due to lack of folders count validation
Alta
CVE-2024-28121
StimulusReflex arbitrary method call
Media
CVE-2024-28176
jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
Alta
CVE-2024-26135
MeshCentral cross-site websocket hijacking (CSWSH) vulnerability
Crítica
CVE-2024-24398
Stimulsoft Dashboard.JS directory traversal vulnerability
Media
CVE-2024-24396
Stimulsoft Dashboard.JS Cross Site Scripting vulnerability
Media
CVE-2024-24397
Stimulsoft Dashboard.JS Cross Site Scripting vulnerability
Media
CVE-2024-23725
Cross-site Scripting in Ghost
Media
CVE-2023-49293
Vite XSS vulnerability in `server.transformIndexHtml` via URL payload
Baja
CVE-2023-48711
google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability
Media
ghsa-hfxh-rjv7-2369
Uptime Kuma Authenticated remote code execution via TailscalePing
Media
CVE-2023-49276
Attribute Injection leading to XSS(Cross-Site-Scripting)
Media
CVE-2023-48223
JWT Algorithm Confusion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.