Media
CVE-2024-1570
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2024-1492
WPify Woo Czech <= 4.0.8 - Missing Authorization
Media
CVE-2024-1475
Coming Soon Maintenance Mode <= 1.0.5 - Information Exposure
Media
CVE-2024-1559
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2024-25298
Code injection in REDAXO
Baja
CVE-2024-20925
Vulnerability affecting the org.openjfx:javafx-media maven component of the OpenJFX project
Crítica
CVE-2024-1068
404 Solution <= 2.35.7 - Authenticated (Admin+) SQL Injection
Media
CVE-2023-6444
Seriously Simple Podcasting <= 2.25.3 - Unauthenticated Email Disclosure
Baja
ghsa-77hh-43cm-v8j6
tuf's Metadata API: Targets.get_delegated_role() is missing input validation
Alta
CVE-2023-45860
Hazelcast Platform permission checking in CSV File Source connector
Alta
ghsa-w4hv-vmv9-hgcr
GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219`
Baja
CVE-2024-24758
Undici proxy-authorization header not cleared on cross-origin redirect in fetch
Media
CVE-2024-24750
fetch(url) leads to a memory leak in undici
Alta
CVE-2024-25466
React Native Document Picker Directory Traversal vulnerability
Media
CVE-2023-49508
YetiForceCRM Directory Traversal vulnerability
Crítica
CVE-2024-0610
Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL Injection
Crítica
CVE-2024-1512
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection
Media
CVE-2024-0590
Microsoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2024-1445
Page scroll to id <= 1.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-1279
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) Information Disclosure via Shortcode
Media
CVE-2024-0978
My Private Site <= 3.0.14 - Improper Access Control to Sensitive Information Exposure via REST API
Media
CVE-2024-1472
WP Maintenance <= 6.1.6 - Information Exposure
Media
CVE-2024-1277
Ocean Extra <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-20720
Magento Open Source allows OS Command Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.