Alta
CVE-2023-22465
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Crítica
CVE-2014-125051
himiklab yii2-jqgrid-widget vulnerable to SQL Injection
Crítica
CVE-2023-22457
XWiki CKEditor.HTMLConverter vulnerable to Remote Code Execution via Cross-Site Request Forgery
Crítica
CVE-2015-10018
DBRisinajumi d2files SQL Injection vulnerability
Media
CVE-2022-45935
Apache James server allows an attacker with local access to access private user data in transit
Media
CVE-2022-45787
Apache James MIME4J vulnerable to information disclosure to local users
Crítica
CVE-2016-15011
dssp vulnerable to Improper Restriction of XML External Entity Reference
Crítica
CVE-2018-25066
nodebatis SQL Injection vulnerability
Crítica
CVE-2022-25923
exec-local-bin vulnerable to Command Injection
Media
CVE-2021-32828
Nuxeo vulnerable to Reflected Cross-Site Scripting leading to Remote Code Execution
Media
CVE-2022-4749
Posts List Designer by Category <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scriptiong via Shortcode
Media
CVE-2023-0071
WP Tabs <= 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-0074
WP Social Widget <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2022-4837
CPO Companion <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2022-4792
News & Blog Designer Pack <= 3.2 - Authenticated (Contributor+) Stored Cross-Site SQcripting via Shortcode
Crítica
CVE-2023-0556
ContentStudio <= 1.2.5 - Missing Authorization
Media
CVE-2023-0097
Post Grid, Post Carousel, & List Category Posts <= 2.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2022-4496
SAML Single Sign On – SSO Login Premium Multisite < 20.0.7 - Open Redirect
Crítica
CVE-2020-36640
bonita-connector-webservice XML External Entity vulnerability
Crítica
CVE-2020-36641
aXMLRPC XML External Entity vulnerability
Media
CVE-2017-20162
Vercel ms Inefficient Regular Expression Complexity vulnerability
Alta
CVE-2021-4305
robots-txt-guard Inefficient Regular Expression Complexity vulnerability
Alta
CVE-2023-22461
@mattkrick/sanitize-svg vulnerable to Cross-Site Scripting (XSS)
Media
CVE-2019-25095
A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site script
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.