Alta
CVE-2024-34145
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Media
CVE-2024-4029
Wildfly vulnerable to denial of service
Media
CVE-2024-34146
Jenkins Git server Plugin does not perform a permission check
Baja
CVE-2024-34147
Jenkins Telegram Bot Plugin stores the Telegram Bot token in plaintext
Media
CVE-2024-34148
Jenkins Subversion Partial Release Manager Plugin programmatically disables the fix for CVE-2016-3721
Baja
CVE-2024-4128
Firebase vulnerable to CRSF attack
Crítica
CVE-2024-3955
CraftBeerPi 4 allows arbitrary code execution
Alta
CVE-2024-32114
Apache ActiveMQ's default configuration doesn't secure the API web context
Media
CVE-2024-3918
Pet Manager <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2024-3070
Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection
Media
CVE-2024-3917
Pet Manager <= 1.4 - Reflected Cross-Site Scripting
Media
CVE-2024-3991
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id
Media
CVE-2024-3920
Flattr <= 1.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-4433
Simple Image Popup <= 2.4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-4107
Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Media
CVE-2024-2220
Button contact VR <= 4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2024-25355
s3-url-parser vulnerable to Denial of Service via regexes component
Crítica
CVE-2024-32962
xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing
Baja
CVE-2024-31573
XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets
Alta
CVE-2023-36821
Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation
Media
CVE-2023-36822
Uptime Kuma's authenticated path traversal via plugin repository name may lead to unavailability or data loss
Crítica
CVE-2024-33768
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
Media
CVE-2024-33766
lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.
Media
CVE-2024-33767
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.