Crítica
CVE-2024-34990
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Crítica
CVE-2024-34994
Improper neutralization of SQL parameter in Channable module for PrestaShop
Crítica
CVE-2024-34993
Improper neutralization of SQL parameter in Buy Addons - Bulk Export products to Google Merchant-Google Shopping module for PrestaShop
Media
CVE-2024-37895
Lobe Chat API Key Leak
Media
CVE-2024-37893
Firefly III has a MFA bypass in oauth flow
Alta
CVE-2024-36543
STRIMZI incorrect access control
Crítica
CVE-2024-37902
DeepJavaLibrary API absolute path traversal
Media
CVE-2024-5533
Divi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-37890
ws affected by a DoS when handling a request with many HTTP headers
Media
CVE-2024-36578
@akbr/update Prototype Pollution
Crítica
CVE-2024-36573
obx Prototype Pollution
Media
CVE-2024-36574
flatten-json Prototype Pollution
Alta
CVE-2024-36577
Object Resolver Prototype Pollution
Alta
CVE-2024-36581
Badger Database Prototype Pollution
Media
CVE-2024-36582
object-deep-assign Prototype Pollution
Media
CVE-2024-36580
@cdr0/sg Prototype Pollution
Media
CVE-2024-0845
PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via render
Media
CVE-2024-4375
Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
Media
CVE-2024-1634
Scheduling Plugin – Online Booking for WordPress <= 3.5.10 - Missing Authorization to Unauthenticated Service Disconnection
Media
CVE-2024-5541
Ibtana - WordPress Website Builder <= 1.2.3.3 - Unauthenticated reCAPTCHA Settings Update
Alta
CVE-2023-5527
Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection
Media
CVE-2024-5860
Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion
Media
CVE-2024-35763
Excellent <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-35762
Serious Slider <= 1.2.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.