Media
CVE-2024-10150
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2024-49762
Pterodactyl Panel has plain-text logging of user passwords when two-factor authentication is disabled
Alta
CVE-2024-49760
OpenRefine has a path traversal in LoadLanguageCommand
Alta
CVE-2024-48514
Remote code execution in php-heic-to-jpg
Alta
ghsa-3pg4-qwc8-426r
OpenRefine leaks Google API credentials in releases
Media
CVE-2024-9607
10Web Social Post Feed <= 1.2.9 - Reflected Cross-Site Scripting
Media
ghsa-mpcw-3j5p-p99x
Butterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE)
Crítica
CVE-2024-47883
Butterfly has path/URL confusion in resource handling leading to multiple weaknesses
Media
CVE-2024-47882
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
Media
CVE-2024-10148
Awesome buttons <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via btn2 Shortcode
Alta
CVE-2024-47881
OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE)
Alta
CVE-2024-47880
OpenRefine has a reflected cross-site scripting vulnerability (XSS) from POST request in ExportRowsCommand
Alta
CVE-2024-47879
OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF)
Alta
CVE-2024-10011
BuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory Traversal
Alta
CVE-2024-47878
OpenRefine has a reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt)
Media
CVE-2024-47173
ai-admin-graphql has a Denial of service vulnerability in SaaS and marketplace setups
Media
CVE-2024-46998
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature
Media
CVE-2024-46996
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature
Media
CVE-2024-46995
baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request
Media
CVE-2024-46994
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature
Media
CVE-2024-9109
UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset
Media
CVE-2024-45031
Apache Syncope: Stored XSS in Console and Enduser
Media
CVE-2024-50466
DarkMySite – Advanced Dark Mode Plugin for WordPress <= 1.2.8 - Cross-Site Request Forgery
Media
CVE-2024-50456
SEOPress <= 8.1.1 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.