Media
CVE-2023-44151
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-49197
DoFollow Case by Case <= 3.4.2 Cross-Site Request Forgery via getEmail and getUrl
Alta
CVE-2023-4274
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal
Media
CVE-2023-4645
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax
Media
CVE-2023-5134
Easy Registration Forms <= 2.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Media
CVE-2023-5120
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting
Media
CVE-2023-44148
Astra Bulk Edit <= 1.2.7 - Missing Authorization
Alta
00687370-8374-44cc-8fd1-53b462acd061
iPanorama 360 – WordPress Virtual Tour Builder <= 1.7.3 - Authenticated (Admin+) SQL injection
Sin evaluar
809
EasyShop - XSS (Cross Site Scripting)
Baja
ghsa-hc5c-r8m5-2gfh
plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait
Crítica
CVE-2023-42810
systeminformation SSID Command Injection Vulnerability
Media
CVE-2023-41048
plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity content. Prior to versions 5.6.1, 6.0.3, 6.1.3, and 6.2.1, there is a stored cross sit
Crítica
ghsa-j646-gj5p-p45g
CefSharp affected by heap buffer overflow in WebP
Baja
ghsa-v8gr-m533-ghj9
Vulnerable OpenSSL included in cryptography wheels
Alta
CVE-2023-42457
plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the `++api++` traverser is accidentally
Media
CVE-2023-5104
Improper Input Validation in nocodb
Media
CVE-2018-5478
Contao Cross-site Scripting vulnerabililty
Crítica
CVE-2015-5467
Yii2 allows attackers to execute any local .php file via a relative path in the view parameter
Alta
CVE-2015-8371
Composer allows cache poisoning from other projects built on the same host
Media
CVE-2023-44146
Checkfront Online Booking System <= 3.6 - Cross-Site Request Forgery
Media
CVE-2023-4774
WP-Matomo Integration (WP-Piwik) <= 1.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-4783
Magee Shortcodes <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-4716
Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-4388
EventON <= 2.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.