Media
CVE-2024-29477
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 423
Restablecer filtros
Media
CVE-2024-30173
OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass
Media
CVE-2023-44379
baserCMS Cross-site Scripting vulnerability in Site search Feature
Media
CVE-2023-51450
baserCMS OS command injection vulnerability in Installer
Media
CVE-2024-26128
baserCMS Cross-site Scripting vulnerability in Content Management
Alta
CVE-2024-25625
Pimcore Host Header Injection in user invitation link
Media
CVE-2023-50172
WWBN AVideo recovery notification bypass vulnerability
Media
CVE-2024-21628
PrestaShop XSS can be stored in DB from "add a message form" in order detail page (FO)
Media
CVE-2023-4198
Dolibarr Improper Input Validation vulnerability
Alta
CVE-2023-4197
Dolibarr Improper Input Validation vulnerability
Media
CVE-2023-43792
baserCMS Code Injection Vulnerability in Mail Form Feature
Media
CVE-2023-43649
baserCMS CSRF vulnerability in Content preview Feature
Media
CVE-2023-43648
baserCMS Directory Traversal vulnerability in Form submission data management Feature
Media
CVE-2023-43647
baserCMS Cross-site Scripting vulnerability in File upload Feature
Media
CVE-2023-29009
baserCMS Cross-site Scripting Vulnerability in Favorites Feature
Alta
CVE-2023-38887
File Upload vulnerability in Dolibarr ERP CRM
Alta
CVE-2023-38886
Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script
Crítica
CVE-2023-38888
Cross Site Scripting vulnerability in Dolibarr ERP CRM
Alta
CVE-2023-40033
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
Media
CVE-2023-2999
thorsten/phpmyfaq vulnerable to cross-site scripting
Alta
CVE-2023-32073
WWBN AVideo command injection vulnerability
Media
CVE-2023-29197
guzzlehttp/psr7 < 1.9.1 & 2.4.5 - Interpretation Conflict
Alta
CVE-2023-24788
NotrinosERP vulnerable to SQL Injection
Crítica
CVE-2023-25655
baserCMS allows any file to be uploaded
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.