Media
CVE-2023-46722
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 138
Restablecer filtros
Media
CVE-2023-5873
Pimcore Cross-site Scripting vulnerability
Media
CVE-2023-4453
Pimcore Cross-site Scripting (XSS) vulnerability in DataObject datetime fields
Media
CVE-2023-38708
Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
Alta
CVE-2023-3819
Pimcore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Alta
CVE-2023-3820
Pimcore vulnerable to SQL Injection in Dataobjects sorting
Media
CVE-2023-3822
Pimcore Cross-site Scripting vulnerability
Media
CVE-2023-3821
Pimcore Cross-site Scripting vulnerability
Alta
CVE-2023-3673
Pimcore SQL Injection vulnerability
Media
CVE-2023-2984
Pimcore vulnerable to Pre-Auth Path Traversal in pimcore_log parameter
Media
CVE-2023-2983
Pimcore Privilege Defined With Unsafe Actions vulnerability
Media
CVE-2023-2730
Pimcore Cross-site Scripting vulnerability
Media
CVE-2023-2630
Pimcore Cross-site Scripting (XSS) vulnerability in Admin Translations
Media
CVE-2023-2616
Pimcore Cross-site Scripting (XSS) in Static Routes name field
Media
CVE-2023-2614
Pimcore Cross-site Scripting (XSS) in name field of Custom Reports
Media
CVE-2023-2615
Pimcore Cross-site Scripting (XSS) in Predefined Properties delete
Media
CVE-2023-30855
Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
Media
CVE-2023-2361
Cross-site Scripting (XSS) in pimcore
Media
CVE-2023-30852
Arbitrary File Read in Admin JS CSS files
Media
CVE-2023-2340
Cross-site Scripting (XSS) in DataObject columns grid
Media
CVE-2023-2339
Cross-site Scripting (XSS) in DataObject Any Getter grid operator
Media
CVE-2023-2336
Path Traversal in Asset "import from server" option
Media
CVE-2023-2332
Cross-site Scripting (XSS) in Conditions tab of Pricing Rules
Media
CVE-2023-2328
Cross-site Scripting (XSS) in DataObjects QuantityValue Unit Definition
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.