Alta
CVE-2024-0056
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Alta
CVE-2024-21643
Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability
Media
CVE-2023-6147
Qualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability
Media
CVE-2023-6148
Qualys Jenkins Plugin for Policy Compliance Cross-site Scripting vulnerability
Media
CVE-2023-6149
Qualys Jenkins Plugin for WAS XML External Entity vulnerability
Media
CVE-2023-50974
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system
Media
CVE-2023-46906
juzawebCMS Incorrect Access Control vulnerability
Media
CVE-2023-7071
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-7070
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
f2b5213d-fdc5-4c98-9a05-15d83bd7308f
Contest Gallery <= 21.2.8.4 - Cross-Site Request Forgery
Media
CVE-2024-0187
Community by PeepSo <= 6.3.1.1 - Reflected Cross-Site Scripting
Media
d89918e1-b525-4d32-9b11-5e014eb02c16
Auto Affiliate Links <= 6.4.2.7 - Cross-Site Request Forgery
Media
CVE-2023-6242
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta
Crítica
CVE-2023-51409
AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload
Media
CVE-2023-6244
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings
Media
CVE-2023-7125
Community by PeepSo <= 6.3.1.1 - Cross-Site Request Forgery to User Post Creation
Media
66377ee2-cc87-4cfe-a4e4-cef4459bf2ec
Seraphinite Alternative Slugs Manager <= 1.3 - Cross-Site Request Forgery
Media
CVE-2023-6994
List category posts <= 0.89.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2023-6979
Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload
Media
CVE-2023-6158
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta
Media
1453815d-4e28-41ec-9aa4-4fd2899c619a
Happy Elementor Addons <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2023-48926
Insecure Direct Object Reference in Advanced Loyalty Program: Loyalty Points module for PrestaShop
Crítica
CVE-2023-6921
Improper neutralization of SQL parameter in PrestaShow Google Integrator module for PrestaShop
Alta
CVE-2024-21651
XWiki vulnerable to Denial of Service attack through attachments
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.