Alta
CVE-2023-30589
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
e8596412-53d5-45ed-998a-49799bd269d0
Image Regenerate & Select Crop <= 7.1.0 - Cross-Site Request Forgery on multiple AJAX actions
Media
b0eb165f-c979-4318-8362-ca47500ed845
Image Regenerate & Select Crop <= 7.1.0 - Missing Authorization on multiple AJAX actions
Media
50f69182-66c0-4d3a-aabe-015b72937f3e
WP Social AutoConnect <= 4.6.1 - Cross-Site Request Forgery via jfb_admin_page
Crítica
CVE-2023-36812
Remote Code Execution for 2.4.1 and earlier
Crítica
CVE-2023-31543
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server.
Crítica
CVE-2023-36468
Upgrading doesn't prevent exploiting vulnerable XWiki documents
Crítica
CVE-2023-36469
XWiki Platform vulnerable to Code injection through NotificationRSSService
Crítica
CVE-2023-36470
XWiki Platform vulnerable to Code Injection in icon themes
Crítica
CVE-2023-36471
org.xwiki.commons:xwiki-commons-xml's HTML sanitizer allows form elements in restricted
Crítica
CVE-2023-36475
Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution
Crítica
CVE-2023-36477
XWiki Platform vulnerable to persistent Cross-site Scripting through CKEditor Configuration pages
Alta
CVE-2023-2422
Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients
Crítica
CVE-2022-4361
Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC
Media
CVE-2023-1664
Keycloak Untrusted Certificate Validation vulnerability
Baja
CVE-2023-2585
Client Spoofing within the Keycloak Device Authorisation Grant
Media
CVE-2023-37302
MediaWiki Cross-site Scripting vulnerability
Media
CVE-2023-34840
angular-ui-notification Cross-site Scripting vulnerability
Sin evaluar
CVE-2023-37360
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security pro
Media
CVE-2023-37299
Joplin Cross-site Scripting vulnerability
Media
CVE-2023-37298
Joplin Cross-site Scripting vulnerability
Alta
CVE-2023-26135
flatnest Prototype Pollution vulnerability
Media
CVE-2023-3469
phpMyFAQ Cross-site Scripting
Alta
CVE-2023-36677
SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.