Alta
CVE-2023-29008
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.476
Restablecer filtros
Alta
CVE-2023-0835
markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS)
Alta
CVE-2023-29003
SvelteKit vulnerable to Cross-Site Request Forgery
Alta
CVE-2023-28427
Prototype pollution in matrix-js-sdk (part 2)
Alta
CVE-2023-28103
Prototype pollution in matrix-react-sdk
Crítica
CVE-2023-28444
angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
Crítica
CVE-2023-26114
code-server vulnerable to Missing Origin Validation in WebSockets
Media
CVE-2023-28155
Server-Side Request Forgery in Request
Alta
CVE-2023-27490
Missing proper state, nonce and PKCE checks for OAuth authentication
Crítica
CVE-2023-1283
builderio/qwik is vulnerable to code injection
Alta
CVE-2023-26111
node-static and @nubosoftware/node-static vulnerable to Directory Traversal
Media
CVE-2023-26492
Directus vulnerable to Server-Side Request Forgery On File Import
Media
CVE-2023-26487
Vega has Cross-site Scripting vulnerability in `lassoAppend` function
Alta
CVE-2023-26104
Denial of Service vulnerability in lite-web-server
Media
CVE-2016-15025
generator-hottowel Cross-site Scripting vulnerability
Media
CVE-2025-27098
Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler
Media
CVE-2023-25572
Cross-Site-Scripting attack on `<RichTextField>`
Alta
CVE-2023-22474
Parse Server option `masterKeyIps` vulnerability to IP spoofing
Alta
CVE-2022-21192
Directory Traversal vulnerability in serve-lite
Media
CVE-2022-25847
Cross-site Scripting (XSS) in serve-lite
Alta
CVE-2020-36651
Path Traversal in web-node-server
Media
ghsa-crhg-xgrg-vvcc
a12nserver vulnerable to potential SQL Injections via Knex dependency
Alta
CVE-2023-22493
RSSHub SSRF vulnerability
Alta
CVE-2023-22491
gatsby-transformer-remark has possible unsanitized JavaScript code injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.