Alta
CVE-2023-35391
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2023-40014
OpenZeppelin Contracts vulnerable to Improper Escaping of Output
Media
CVE-2023-3481
Critters Cross-site Scripting Vulnerability
Alta
CVE-2023-0871
OpenNMS Horizon XXE Injection Vulnerability
Alta
CVE-2020-24922
xuxueli xxl-job Cross-Site Request Forgery Vulnerability
Media
CVE-2021-29057
SUCHMOKUO node-worker-threads-pool denial of service Vulnerability
Media
CVE-2021-27524
Margox Braft-Editor Cross-site Scripting Vulnerability
Crítica
CVE-2021-26505
MrSwitch hello.js vulnerable to prototype pollution
Media
CVE-2020-25915
ThinkCMF Cross-site Scripting Vulnerability
Media
CVE-2020-20523
Gila CMS Cross-site Scripting Vulnerability
Alta
CVE-2023-39553
apache-airflow-providers-apache-drill Improper Input Validation vulnerability
Crítica
CVE-2023-40267
GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments
Media
CVE-2023-27506
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Baja
CVE-2023-4304
Froxlor vulnerable to business logic errors
Media
CVE-2023-40210
SB Child List <= 4.5 - Cross-Site Request Forgery via 'sb_cl_update_settings'
Media
CVE-2023-35040
SendPress Newsletters <= 1.23.11.6 - Missing Authorization
Media
CVE-2023-3764
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save
Media
CVE-2023-30485
Avartan Slider Lite <= 1.5.3 - Reflected Cross-Site Scripting via 'asview-nouce'
Media
CVE-2023-40197
flowpaper <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-40202
WP HTML Mail <= 3.4.0 - Cross-Site Request Forgery via 'send_test'
Media
CVE-2023-40205
PixTypes <= 1.4.15 - Reflected Cross-Site Scripting
Media
CVE-2022-47168
Printful Integration for WooCommerce <= 2.2.2 - Cross-Site Request Forgery
Media
CVE-2023-32296
Kangu para WooCommerce <= 2.2.10 - Reflected Cross-Site Scripting
Media
CVE-2023-39994
ARMember Premium <= 5.9.2 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.