Media
ghsa-55p7-v223-x366
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 524
Restablecer filtros
Media
CVE-2024-39694
IdentityServer Open Redirect vulnerability
Crítica
CVE-2024-28698
CLSA Directory Traversal vulnerability
Baja
CVE-2024-40636
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Alta
ghsa-gmc6-fwg3-75m5
Mimekit has vulnerable dependency that can lead to denial of service
Alta
CVE-2024-38095
Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability
Alta
CVE-2024-38081
Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability
Crítica
CVE-2024-35264
Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability
Alta
CVE-2024-30105
Microsoft Security Advisory CVE-2024-30105 | .NET Denial of Service Vulnerability
Alta
CVE-2024-39677
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
Media
CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Media
CVE-2024-38357
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Media
CVE-2024-30046
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
Media
CVE-2024-30045
Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability
Alta
CVE-2024-21409
.NET Elevation of Privilege Vulnerability
Media
CVE-2024-29035
Blind SSRF Leads to Port Scan by using Webhooks
Baja
CVE-2024-27086
MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service
Media
CVE-2024-32028
Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore
Media
CVE-2024-29203
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
Media
CVE-2024-29881
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
Alta
CVE-2024-29187
WiX based installers are vulnerable to binary hijack when run as SYSTEM
Alta
CVE-2024-29188
Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files
Alta
ghsa-g4v6-69p6-q3p4
WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM
Alta
ghsa-wq88-fq4x-h2pm
WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.