Alta
CVE-2024-28116
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.071
Restablecer filtros
Alta
CVE-2024-27921
Grav File Upload Path Traversal
Media
CVE-2024-28593
Cross-site Scripting in Moodle Chat
Media
CVE-2024-29374
Cross site scripting in moodle
Media
ghsa-9j39-4686-m3c4
Ibexa Kernel's files with blacklisted extensions can be still saved to drafts
Media
ghsa-mwvh-p3hx-x4gg
Ibexa Kernel's files with blacklisted extensions can be still saved to drafts
Media
CVE-2024-21504
Cross-site Scripting in livewire/livewire
Baja
CVE-2024-28864
[TagAwareCipher] - Decryption Failure (Regex Match)
Media
CVE-2024-28859
Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency
Media
CVE-2024-2497
RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php`
Media
CVE-2023-36238
Bagisto vulnerable to Insecure Direct Object Reference (IDOR)
Alta
CVE-2024-28754
raspap-webgui vulnerable to denial of service
Sin evaluar
CVE-2024-13251
drupal/registration_role - SA-CONTRIB-2024-015
Alta
CVE-2024-58381
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time)
Alta
CVE-2024-58380
PocketMine-MP BookEditPacket crash when inventory slot in the packet is invalid
Alta
CVE-2024-27923
Remote Code Execution by uploading a phar file using frontmatter
Alta
CVE-2024-27917
Shopware's session is persistent in Cache for 404 pages
Baja
CVE-2024-2179
Concrete CMS Stored Cross-site Scripting vulnerability
Media
CVE-2024-27915
Sulu grants access to pages regardless of role permissions
Media
CVE-2024-27499
Bagist Cross-site Scripting vulnerability
Media
CVE-2024-2001
Cockpit CMS Cross-Site Scripting vulnerability
Media
CVE-2024-27516
livehelperchat Server-Side Template Injection
Media
CVE-2023-48653
Concrete CMS Cross Site Request Forgery (CSRF) vulnerability
Media
CVE-2023-48651
Concrete CMS Cross Site Request Forgery (CSRF) vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.