Media
CVE-2023-49744
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.563
Media
CVE-2023-49766
Ultimate Addons for Contact Form 7 <= 3.2.0 - Reflected Cross-Site Scripting
Crítica
CVE-2023-48887
Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC request
Media
CVE-2023-44402
ASAR Integrity bypass via filetype confusion in electron
Alta
ghsa-7vwr-g6pm-9hc8
Cookie leakage between different users in fastapi-proxy-lib
Media
ghsa-6g3j-p5g6-992f
OpenSearch StackOverflow vulnerability
Crítica
CVE-2023-49371
RuoYi vulnerable to SQL injection vulnerability
Alta
CVE-2023-49735
Apache Tiles: Unvalidated input may lead to path traversal and XXE
Media
CVE-2023-49745
Spiffy Calendar <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-49195
Nested Pages <= 3.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
ac7c0dde-5299-4938-beed-eb2fe227a812
SpeedyCache <= 1.1.2 - Missing Authorization via speedycache_create_test_cache
Media
CVE-2023-49741
Coming soon and Maintenance mode <= 3.7.3 - IP Address Spoofing via get_real_ip
Media
95abec2d-a03a-4b07-8890-18568650c41f
Gift Up 2.21.3 - Cross-Site Request Forgery via consume_post
Crítica
CVE-2023-5991
Hotel Booking Lite <= 4.8.4 - Insufficient Path Validation to Unauthenticated Arbitrary File Deletion and Download
Media
CVE-2023-49194
Importify <= 1.0.4 - Unauthenticated Sensitive Information Exposure
Media
CVE-2023-49740
Seraphinite Accelerator <= 2.20.28 - Reflected Cross-Site Scripting via rt
Media
CVE-2023-49196
PageLayer <= 1.7.7 - Cross-Site Request Forgery via pagelayer_load_plugin
Media
CVE-2023-49739
PowerPack Pro for Elementor <= 2.9.23 - Reflected Cross-Site Scripting
Media
CVE-2023-49192
Enhanced Text Widget <= 1.6.3 - Missing Authorization via etw_hide_admin_notification_callback
Media
CVE-2023-49193
Social Pug <= 1.30.0 - Missing Authorization via multiple admin_init actions
Media
1ce1316b-674a-4436-968f-9ffca4e8f726
Abandoned Cart Lite for WooCommerce <= 5.16.1 - Cross-Site Request Forgery
Media
0b7d7b64-8194-4b81-83f5-1f3b23109455
Guest Author <= 2.3 - Authenticated Stored Cross-Site Scripting
Media
CVE-2023-4218
Eclipse IDE XXE in eclipse.platform
Media
CVE-2023-48631
@adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.