Media
CVE-2023-33208
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Crítica
CVE-2023-2704
BP Social Connect <= 1.5 - Authentication Bypass
Crítica
CVE-2023-2780
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
Media
CVE-2023-26044
ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limits
Alta
CVE-2023-2756
pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment query
Media
CVE-2023-2752
phpMyFAQ vulnerable to stored Cross-site Scripting
Media
CVE-2023-2753
phpMyFAQ vulnerable to stored Cross-site Scripting
Media
CVE-2023-32313
vm2 vulnerable to Inspect Manipulation
Media
CVE-2023-2261
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
Media
CVE-2023-2286
WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup
Crítica
CVE-2023-2733
MStore API <= 3.9.0 - Authentication Bypass
Media
CVE-2023-2284
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db
Media
CVE-2023-2285
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db
Media
CVE-2023-23900
Easy Forms for Mailchimp <= 6.8.8 - Reflected Cross-Site Scripting via 'sql_error'
Alta
CVE-2023-2757
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
Crítica
CVE-2023-30191
Improper neutralization of SQL parameter in Prestaeg - CDesigner module for PrestaShop
Media
CVE-2023-31544
alkacon-OpenCMS vulnerable to stored Cross-site Scripting
Media
CVE-2021-27131
Moodle vulnerable to stored Cross-site Scripting
Media
CVE-2023-2631
Jenkins Code Dx Plugin missing permission checks
Media
CVE-2023-2195
Jenkins Code Dx Plugin cross-site request forgery vulnerability
Media
CVE-2023-32988
Jenkins Azure VM Agents Plugin missing permission checks
Media
CVE-2023-32993
Jenkins SAML Single Sign On(SSO) Plugin missing hostname validation
Media
CVE-2023-32982
Jenkins Ansible Plugin stores and displays secrets in plain text
Baja
CVE-2023-33000
Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.