Media
CVE-2024-3023
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Media
CVE-2024-33932
Login Logout Register Menu <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-3368
All in One SEO <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2024-33275
Improper neutralization of SQL parameter in Webbax - Super Newsletter module for PrestaShop
Crítica
CVE-2024-33273
Improper neutralization of SQL parameter in ShipUp module for PrestaShop
Alta
CVE-2023-45385
Improper Limitation of a Pathname to a Restricted Directory in ProQuality - Print Shipping Labels Pro module for PrestaShop
Crítica
CVE-2024-33267
Improper neutralization of SQL parameter in Hero - Payment module for PrestaShop
Alta
CVE-2024-33270
Exposure of Private Personal Information to an Unauthorized Actor in FME Modules - Customer File Upload-Attach File on Product,Cart pages module for PrestaShop
Alta
CVE-2024-33274
Improper Limitation of a Pathname to a Restricted Directory in FME Modules - Custom Checkout Fields, Add Custom Fields to Checkout module for PrestaShop
Media
CVE-2024-33883
ejs lacks certain pollution protection
Media
CVE-2024-33851
mdanter/ecc affected by timing vulnerability in cryptographic side-channels
Media
CVE-2024-31828
Lavalite CMS Cross Site Scripting vulnerability
Alta
CVE-2023-34423
Survey Maker – Best WordPress Survey Plugin <= 3.6.6 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-35764
Survey Maker <= 4.0.9 - IP Address Spoofing
Media
CVE-2024-33669
Passbolt Browser Extension leaks password information
Media
CVE-2024-33670
Passbolt API allows HTML injection
Media
CVE-2024-33664
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT b
Media
CVE-2024-33677
Contact Form 7 Extension For Mailchimp <= 0.5.73 - Cross-Site Request Forgery
Media
CVE-2024-3553
Tutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options Update
Media
CVE-2024-33688
Teluro <= 1.0.31 - Cross-Site Request Forgery
Media
CVE-2024-33692
Smart Recent Posts Widget <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-30241
ProfileGrid <= 5.7.1 - Authenticated (Contributor+) SQL Injection
Media
CVE-2024-2744
Nextgen Gallery <= 3.59 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-3309
Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.