Alta
CVE-2023-29003
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Crítica
CVE-2020-20913
Ming-Soft MCMS vulnerable to SQL injection
Media
CVE-2020-19697
Pandao Editor.md vulnerable to cross-site scripting (XSS) in iframe src parameter
Media
CVE-2020-19698
Pandao Editor.md vulnerable to cross-site scripting (XSS) in editor parameter
Media
CVE-2020-19850
Directus API vulnerable to denial of service
Media
CVE-2023-1703
pimcore is vulnerable to cross-site scripting in Composite indices key field
Media
CVE-2023-29236
Outdoor <= 3.9.6 - Reflected Cross-Site Scripting
Alta
CVE-2023-0924
Zyrex Popup <= 1.0 - Authenticated (Admin+) Arbitrary File Upload
Media
CVE-2023-25057
Libsyn Publisher Hub <= 1.3.2 - Sensitive Information Exposure
Media
CVE-2023-1021
Amr Ical Events Lists <= 6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-1840
Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-25051
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery
Crítica
CVE-2023-26860
Improper neutralization of SQL parameter in lgbudget module for PrestaShop
Media
CVE-2023-28851
Silverstripe Form Capture vulnerable to stored cross-site-scripting
Media
CVE-2023-28850
Pimcore Perspective Editor vulnerable to stored cross-site scripting (XSS) in perspective name
Alta
CVE-2023-28836
Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views
Media
CVE-2023-28837
Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files
Alta
CVE-2023-26269
Apache James server's JMX management service vulnerable to privilege escalation by local user
Media
CVE-2023-1129
WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Manipulation
Alta
CVE-2023-1420
Ajax Search Lite <= 4.11 - Reflected Cross-Site Scripting
Media
CVE-2023-29094
Product page shipping calculator for WooCommerce <= 1.3.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-1624
WPCode <= 2.0.8 - Cross-Site Request Forgery
Media
df413b9d-5c22-4276-a11b-4f193c48740d
HT Builder <= 1.2.9 - Cross-Site Request Forgery via plugin_activation
Crítica
CVE-2023-1020
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.