Baja
CVE-2023-33194
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 127
Restablecer filtros
Alta
CVE-2023-32679
Craft CMS vulnerable to Remote Code Execution via unrestricted file extension
Alta
CVE-2023-30130
CraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameter
Media
CVE-2023-31144
craftcms/cms vulnerable to cross site scripting in RSS feed widget
Media
CVE-2023-30177
Cross Site Scripting in CraftCMS
Media
CVE-2023-23927
Craft CMS Stored Cross-site Scripting Injection Vulnerability
Alta
CVE-2022-37783
Craft CMS discloses password hashes
Media
CVE-2022-37246
Craft CMS Cross-site Scripting vulnerability
Media
CVE-2022-37248
Craft CMS Cross site Scripting vulnerability
Media
CVE-2022-37250
Craft CMS Stored Cross-site Scripting in User Addresses Title
Media
CVE-2022-37251
Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts
Media
CVE-2022-37247
Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page
Media
CVE-2020-19626
Craft CMS Cross-site Scripting Vulnerability
Crítica
CVE-2019-15929
Craft CMS possibility of brute force attempts
Media
CVE-2019-17496
Craft CMS XSS Vulnerability
Media
CVE-2019-12823
Craft CMS XSS Vulnerability
Media
CVE-2017-8052
Craft CMS XSS Vulnerability
Media
CVE-2017-8385
Craft CMS subject to URL forgery
Media
CVE-2017-8384
Craft CMS XSS Vulnerability
Media
CVE-2017-9516
Craft CMS XSS Vulnerability
Media
CVE-2018-20418
Craft CMS Cross-site Scripting (XSS) Vulnerability
Alta
CVE-2018-20465
Craft CMS Vulnerable to Server-Side Template Injection
Media
CVE-2017-8383
Craft CMS Unauthorized View
Alta
CVE-2018-3814
Craft CMS PHP Code Injection Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.