Alta
ghsa-2g98-f9jv-w8c5
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.583
Media
CVE-2024-4470
Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
ghsa-7v7m-pcw5-h3cg
Pusher Service Channel Authentication Bypass
Crítica
ghsa-7g7c-qhf3-x59p
propel/propel1 SQL injection possible with limit() on MySQL
Crítica
ghsa-7vw7-qx38-37vr
Propel2 SQL injection possible with limit() on MySQL
Media
ghsa-ww6p-q26w-fr6m
phpxmlrpc/extra XSS in class documenting_xmlrpc_server
Media
ghsa-qm5v-pj64-852j
Passbolt Api Tabnabbing when opening URI with menu "Open URI in a new tab"
Alta
ghsa-2f46-4xjm-73x5
Passbolt API Stored XSS on first/last name during setup
Alta
ghsa-cv5c-2qv5-w2m2
Passbolt Api Remote code execution
Baja
ghsa-f5pp-pmq8-gp46
Passbolt Api Retrieval of HTTP-only cookies
Media
ghsa-v86m-j5f7-ccwh
Passbolt Api E-mail HTML injection
Alta
CVE-2024-28109
veraPDF has potential XSLT injection vulnerability when using policy files
Media
ghsa-3vhm-q4w3-rw8q
OroPlatform Forced Redirect to External Website
Media
ghsa-v8hp-239v-9367
OroCRM Forced Redirect to External Website
Media
CVE-2024-4943
Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-3155
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-34795
Tainacan <= 0.21.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-34792
Dextaz Ping <= 0.65 - Authenticated (Admin+) Remote Code Execution
Media
CVE-2024-34797
Simple Popup Manager <= 1.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-34803
Fastly <= 1.2.25 - Missing Authorization
Media
CVE-2024-4619
Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Media
CVE-2024-4361
Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode
Media
CVE-2024-4710
Uber Menu <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Media
CVE-2024-4452
ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.