Crítica
CVE-2024-38735
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Baja
CVE-2024-38701
Academy LMS <= 2.0.4 - Missing Authorization
Media
CVE-2024-38757
Typebot <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-38697
Goftino <= 1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2024-1747
WooCommerce Customers Manager <= 30.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Crítica
CVE-2024-38759
Search & Replace <= 3.2.2 - Unauthenticated PHP Object Injection
Media
CVE-2024-6495
Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget
Crítica
CVE-2024-6037
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to unc
Crítica
CVE-2024-6036
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/queue/join?` endpoint with `"fn_index":66`. This unr
Baja
CVE-2024-39901
OpenSearch Observability does not properly restrict access to private tenant resources
Alta
CVE-2024-39693
Next.js Denial of Service (DoS) condition
Media
CVE-2024-6554
Branda – White Label WordPress, Custom Login Page Customizer <= 3.4.18 - Unauthenticated Full Path Disclosure
Media
CVE-2024-39899
PrivateBin allows shortening of URLs for other domains
Media
CVE-2024-6210
Duplicator <= 1.5.9 - Full Path Disclosure
Alta
CVE-2024-6447
FULL <= 3.1.12 - Unauthenticated Stored Cross-Site Scripting via License Plan Parameter
Alta
CVE-2024-21526
speaker vulnerable to Denial of Service
Alta
CVE-2024-21525
node-twain vulnerable to Improper Check or Handling of Exceptional Conditions
Alta
CVE-2024-21523
images vulnerable to Denial of Service
Alta
CVE-2024-21524
node-stringbuilder vulnerable to Out-of-bounds Read
Alta
CVE-2024-21521
@discordjs/opus vulnerable to Denial of Service
Alta
CVE-2024-21522
audify vulnerable to Improper Validation of Array Index
Alta
CVE-2024-39614
Django vulnerable to Denial of Service
Alta
CVE-2024-39330
Django Path Traversal vulnerability
Media
CVE-2024-39329
Django vulnerable to user enumeration attack
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.