Media
CVE-2023-1921
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.601
Media
CVE-2023-24418
Tiny carousel horizontal slider plus <= 3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-1925
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'
Media
CVE-2023-1919
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'
Media
CVE-2023-29422
Dynamics 365 Integration <= 1.3.13 - Missing Authorization via init
Crítica
CVE-2023-27033
Unrestricted Upload of File with Dangerous Type in Cdesigner module for PrestaShop
Media
CVE-2023-0842
xml2js is vulnerable to prototype pollution
Alta
CVE-2023-1887
thorsten/phpmyfaq vulnerable to business logic errors
Media
CVE-2023-1788
Firefly III insufficiently expires sessions
Alta
CVE-2023-1886
thorsten/phpmyfaq vulnerable to authentication bypass
Media
CVE-2023-1885
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via category field name parameter
Media
CVE-2023-1884
thorsten/phpmyfaq vulnerable to cross-site scripting (XSS) via stopword parameter
Media
CVE-2023-1883
thorsten/phpmyfaq vulnerable to improper access control
Alta
CVE-2023-1882
thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameter
Alta
CVE-2023-1881
Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header
Alta
CVE-2023-1880
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter
Media
CVE-2023-1879
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via updatecategory parameter
Alta
CVE-2023-1878
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via adminlog
Media
CVE-2023-1877
Microweber vulnerable to command injection
Alta
CVE-2023-1758
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter
Alta
CVE-2023-1757
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter
Media
CVE-2023-1756
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via HTML export
Crítica
CVE-2023-25330
MyBatis-Plus vulnerable to SQL injection via TenantPlugin
Crítica
CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.