Media
CVE-2024-2618
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
ghsa-4h54-vwx9-3vr3
Silverstripe XSS In FormAction
Media
ghsa-34q6-xqxh-gq39
Silverstripe XSS In rewritten hash links
Media
ghsa-88jp-9jrv-6368
Silverstripe XSS In GridField print
Media
ghsa-r32j-mr8p-hfp8
Silverstripe XSS in TreeDropdownField and TreeMultiSelectField
Media
ghsa-g43w-98wp-m694
SilverStripe framework XML Quadratic Blowup Attack
Media
CVE-2024-5205
Videojs HTML5 Player <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via videojs_video Shortcode
Media
ghsa-5f5v-5c3v-gw5v
Silverstripe IE requests not properly behaving with rewritehashlinks
Media
ghsa-w8fq-xgvh-cxc2
Silverstripe Forum Module CSRF Vulnerability
Media
CVE-2024-4409
WP-ViperGB <= 1.6.1 - Cross-Site Request Forgery
Media
CVE-2024-5165
Eclipse Ditto vulnerable to Cross-site Scripting
Alta
CVE-2024-26139
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionalit
Media
CVE-2024-4484
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-2762
FooGallery (Free and Premium) < 2.4.15 - Authenticated (Author+) Stored Cross-Site Scripting
Alta
CVE-2024-4455
YITH WooCommerce Ajax Search <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2024-2784
The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card
Crítica
CVE-2024-4544
Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass
Media
CVE-2024-3032
Themify Builder <= 7.5.7 - Open Redirect via 'tb_redirect_fail'
Alta
CVE-2024-4145
Search & Replace <= 3.2.1 - Authenticated (Administrator+) SQL injection
Media
CVE-2024-4366
Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2024-4485
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2024-3552
Web Directory Free <= 1.6.9 - Unauthenticated SQL Injection
Media
CVE-2024-4149
Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-3718
The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.