Media
CVE-2024-12238
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2024-54775
Dcat-Admin Cross-Site Scripting (XSS) vulnerability
Media
CVE-2024-54774
Dcat Admin Cross-site Scripting (XSS) vulnerability
Media
CVE-2025-24609
PORTONE 우커머스 결제 <= 3.2.5 - Reflected Cross-Site Scripting
Media
CVE-2025-24608
GD Mail Queue <= 4.3 - Reflected Cross-Site Scripting
Media
CVE-2024-56527
TCPDF missing character escape on error messages
Alta
CVE-2024-56522
TCPDF has incorrect comparison
Media
CVE-2024-56520
tecnickcom/tc-lib-pdf-font mishandles fonts
Media
CVE-2024-56519
TCPDF lacks SVG sanitization
Alta
CVE-2024-56521
TCPDF missing certificate validation
Media
CVE-2024-12301
JSP Store Locator <= 1.0 - Cross-Site Request Forgery to Store Deletion
Media
CVE-2024-9020
List category posts <= 0.90.2 - Authenticated (Author+) Stored Cross-Site Scripting
Baja
CVE-2025-24605
WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.5 - Authenticated (Editor+) Path Traversal
Media
CVE-2024-11267
JSP Store Locator <= 1.0 - Authenticated (Contributor+) SQL Injection
Media
CVE-2024-11269
AHAthat Plugin <= 1.6 - Authenticated (Admin+) SQL Injection
Media
CVE-2025-24607
IdeaPush <= 8.72 - Missing Authorization
Media
CVE-2024-45805
OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support informat
Alta
CVE-2024-12744
Amazon Redshift JDBC Driver vulnerable to SQL Injection
Alta
CVE-2024-56361
lgsl Stored Cross-Site Scripting vulnerability
Media
CVE-2024-56510
Marp Core allows XSS by improper neutralization of HTML sanitization
Media
CVE-2025-24599
Newsletters <= 4.9.9.6 - Reflected Cross-Site Scripting
Media
CVE-2025-24602
WP24 Domain Check <= 1.10.14 - Reflected Cross-Site Scripting
Media
CVE-2025-24597
Barcode Generator for WooCommerce – Show barcodes on products, orders, invoices and other pages <= 2.0.2 - Authenticated (Subscriber+) Sensitive Information Disclosure
Media
CVE-2024-13865
S3Player – WooCommerce & Elementor Integration <= 4.2.1 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.