Media
CVE-2023-28472
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 121
Restablecer filtros
Media
CVE-2023-28471
Stored cross site scripting via container name
Media
CVE-2023-28474
Stored cross site scripting on saved presets
Media
CVE-2023-28476
Stored cross site scripting on tags
Crítica
CVE-2023-28473
Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
Media
CVE-2022-43556
Concrete CMS vulnerable to cross-site scripting in the text input field
Media
CVE-2022-43692
Concrete CMS vulnerable to Reflected Cross-site Scripting
Media
CVE-2022-43694
Concrete CMS vulnerable to Reflected Cross-site Scripting via image manipulation library
Media
CVE-2022-43691
Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information
Media
CVE-2022-43686
Concrete CMS vulnerable to Uncontrolled Resource Consumption leading to DoS
Media
CVE-2022-43968
Concrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard icons
Media
CVE-2022-43967
Concrete CMS vulnerable to Cross-site Scripting via multilingual report
Media
CVE-2022-43688
Concrete CMS vulnerable to Cross-site Scripting
Media
CVE-2022-43687
Concrete CMS vulnerable to Session Fixation
Media
CVE-2022-43690
Concrete CMS vulnerable to Improper Authentication
Media
CVE-2022-43689
Concrete CMS vulnerable to XML External Entity
Alta
CVE-2022-43693
Concrete CMS vulnerable to Cross-site Request Forgery
Media
CVE-2021-28145
Concrete CMS Cross-site Scripting via Survey Blocks
Baja
CVE-2015-3989
concrete5 vulnerable to Cross-site Scripting
Media
CVE-2012-5181
Concrete5 Vulnerable to Cross-Site Scripting (XSS)
Media
CVE-2017-7725
Concrete CMS vulnerable to cross-site scripting (XSS)
Alta
CVE-2021-22954
Cross Site Request Forgery in concrete5/concrete5
Media
CVE-2020-14961
Unrestricted Uploads in Concrete5
Alta
CVE-2020-11476
Unrestricted Uploads in Concrete5
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.