Media
CVE-2023-46998
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 919
Restablecer filtros
Media
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Media
CVE-2023-43794
nocodb SQL Injection vulnerability
Crítica
CVE-2023-26045
Path traversal and code execution via prototype vulnerability
Baja
CVE-2023-35931
Shescape potential environment variable exposure on Windows with CMD
Alta
CVE-2023-34232
Snowflake NodeJS Driver vulnerable to Command Injection
Media
CVE-2023-32688
Invalid push request payload crashes Parse Server
Media
CVE-2023-30094
Cross-site scripting in TotalJS
Alta
CVE-2023-30843
Hidden fields can be leaked on readable collections in Payload
Alta
CVE-2023-30609
HTML injection in search results via plaintext message highlighting
Media
CVE-2023-2142
Nunjucks autoescape bypass leads to cross site scripting
Crítica
CVE-2023-22621
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
Alta
Explotada en ataques
CVE-2023-22894
Strapi leaking sensitive user information by filtering on private fields
Media
CVE-2021-32855
Vditor Cross-site Scripting vulnerability
Media
CVE-2021-32854
textAngular Cross-site Scripting vulnerability
Alta
CVE-2023-22491
gatsby-transformer-remark has possible unsanitized JavaScript code injection
Crítica
CVE-2022-46164
NodeBB vulnerable to account takeover via prototype vulnerability
Alta
CVE-2022-24999
qs vulnerable to Prototype Pollution
Crítica
CVE-2022-2421
Insufficient validation when decoding a Socket.IO packet
Media
CVE-2022-39350
@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details
Alta
CVE-2022-35923
v8n vulnerable to Inefficient Regular Expression Complexity
Crítica
CVE-2022-39266
isolated-vm has vulnerable CachedDataOptions in API
Media
CVE-2022-38639
Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting
Alta
CVE-2020-26938
oauth2-server through 3.1.1 vulnerable to Open Redirect
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.