Media
CVE-2022-40203
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2023-23926
XML External Entity (XXE) vulnerability in apoc.import.graphml
Media
CVE-2023-23936
CRLF Injection in Nodejs ‘undici’ via host
Alta
CVE-2023-24807
Regular Expression Denial of Service in Headers
Alta
CVE-2023-25653
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
Media
CVE-2025-27098
Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler
Media
CVE-2023-22580
Sequelize information disclosure vulnerability
Media
ghsa-mhgm-52vg-pvvc
Privilege escalation in Strongbox
Crítica
CVE-2020-19825
Cross-site Scripting in kimai/kimai
Alta
CVE-2023-0279
Media Library Assistant <= 3.05 - Authenticated (Administrator+) SQL Injection
Media
c79fd08c-97bc-4d55-832e-92d0897bc3dc
Protected Posts Logout Button <= 1.4.4 - Cross-Site Request Forgery to Settings Update
Media
CVE-2023-25454
Protected Posts Logout Button <= 1.4.5 - Missing Authorization on pplb_options_save
Media
CVE-2023-0538
Campaign URL Builder <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-25790
Woodmart <= 7.0.4 - Unauthenticated Arbitrary Content Injection
Media
CVE-2023-23848
CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials
Baja
CVE-2023-23847
CSRF vulnerability in Synopsys Jenkins Coverity Plugin
Media
CVE-2023-23850
Synopsys Jenkins Coverity Plugin has Incorrect Default Permissions
Media
ghsa-76r7-h46w-463r
Cross Site Scripting (XSS) in Model\DataObject\Data\UrlSlug
Media
CVE-2023-25763
Cross-site Scripting in Jenkins Email Extension Plugin
Media
CVE-2023-25764
Cross-site Scripting in Jenkins Email Extension Plugin
Media
CVE-2023-25761
Cross-site Scripting in Jenkins JUnit Plugin
Media
CVE-2023-25762
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
Media
CVE-2023-25768
Missing Authorization in Jenkins Azure Credentials Plugin
Media
CVE-2023-25766
Missing Authorization in Jenkins Azure Credentials Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.