Media
CVE-2023-46198
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-45803
urllib3's request body not stripped after redirect from 303 status changes request method to GET
Crítica
CVE-2023-42627
Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module
Media
CVE-2023-45807
OpenSearch Issue with tenant read-only permissions
Alta
ghsa-8wx3-324g-w4qq
OpenSearch uncontrolled resource consumption
Crítica
ghsa-rc4v-99cr-pjcm
Prototype Pollution in ali-security/mongoose
Media
CVE-2023-44394
MantisBT may disclose project names to unauthorized users
Media
CVE-2023-43794
nocodb SQL Injection vulnerability
Alta
CVE-2023-40180
Silverstripe GraphQL has DDOS Vulnerability due to lack of protection against recursive queries
Media
CVE-2023-45669
WebAuthn4J Spring Security Improper signature counter value handling
Crítica
CVE-2023-45144
XWiki Identity Oauth Privilege escalation (PR)/remote code execution from login screen through unescaped URL parameter
Crítica
CVE-2023-42628
Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget
Crítica
CVE-2023-44311
Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class
Crítica
CVE-2023-44310
Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu
Crítica
CVE-2023-44309
Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components
Crítica
CVE-2023-42629
Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page
Crítica
CVE-2023-42497
Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page
Crítica
CVE-2023-45138
XWiki Change Request Application UI XSS and remote code execution through change request title
Media
f709fca2-b7b6-4567-8055-1156f510d1ca
Envo Extra <= 1.8.3 - Cross-Site Request Forgery
Media
CVE-2023-46188
Freesoul Deactivate Plugins <= 2.1.3 - Cross-Site Request Forgery via eos_dp_pro_delete_transient
Alta
CVE-2023-46149
Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
CVE-2023-46154
E2Pdf <= 1.20.18 - Authenticated (Administrator+) PHP Object Injection
Media
CVE-2023-46093
Webmaster Tools <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2023-46145
Themify Ultra <= 7.3.5 - Privilege Escalation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.