Media
CVE-2023-6027
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.563
Crítica
CVE-2023-6026
PHPMemcachedAdmin Path Traversal vulnerability
Crítica
CVE-2023-49733
Apache Cocoon Improper Restriction of XML External Entity Reference vulnerability
Crítica
CVE-2022-45135
Apache Cocoon SQL Injection vulnerability
Media
CVE-2023-49620
Apache DolphinScheduler Missing Authorization vulnerability
Alta
CVE-2023-49052
Microweber file upload vulnerability
Media
CVE-2023-49081
aiohttp's ClientSession is vulnerable to CRLF injection via version
Alta
CVE-2023-44989
CF7 Google Sheets Connector <= 5.0.5 - Unauthenticated Sensitive Information Exposure via Debug Log
Media
CVE-2023-51666
Related Post <= 2.0.53 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-6155
Quiz Maker <= 6.4.9.4 - Missing Authorization to Email Disclosure
Alta
CVE-2023-6528
Slider Revolution < 6.6.19 - Authenticated (Author+) PHP Object Injection
Media
6954364e-567c-407c-afc6-983b7257cc88
Quotes for WooCommerce <= 2.0.1 - Cross-Site Request Forgery
Media
CVE-2023-6166
Quiz Maker <= 6.4.9.4 - Reflected Cross-Site Scripting
Media
CVE-2023-51680
Quotes for WooCommerce <= 2.0.1 - Missing Authorization
Media
CVE-2023-6449
Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload
Media
CVE-2023-2439
UserPro <= 5.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2023-6266
Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure
Media
CVE-2023-44383
October CMS stored XSS by authenticated backend user with improper configuration
Crítica
CVE-2023-44382
October CMS safe mode bypass using Twig sandbox escape
Media
CVE-2023-44381
October CMS safe mode bypass using Page template injection
Baja
CVE-2022-2232
Keycloak vulnerable to LDAP Injection on UsernameForm Login
Media
CVE-2023-49082
aiohttp's ClientSession is vulnerable to CRLF injection via method
Media
CVE-2023-49083
cryptography vulnerable to NULL-dereference when loading PKCS7 certificates
Media
CVE-2023-49673
Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.