Media
CVE-2023-30541
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Media
CVE-2023-29529
matrix-js-sdk vulnerable to invisible eavesdropping in group calls
Crítica
CVE-2023-29199
vm2 Sandbox Escape vulnerability
Crítica
CVE-2023-26122
safe-eval vulnerable to Sandbox Bypass due to improper input sanitization
Crítica
CVE-2023-26121
safe-eval vulnerable to Prototype Pollution via the safeEval function
Crítica
CVE-2023-29017
vm2 vulnerable to sandbox escape
Alta
CVE-2023-29008
SvelteKit framework has Insufficient CSRF protection for CORS requests
Media
CVE-2023-0842
xml2js is vulnerable to prototype pollution
Alta
CVE-2023-0835
markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS)
Alta
CVE-2023-29003
SvelteKit vulnerable to Cross-Site Request Forgery
Media
CVE-2020-19697
Pandao Editor.md vulnerable to cross-site scripting (XSS) in iframe src parameter
Media
CVE-2020-19698
Pandao Editor.md vulnerable to cross-site scripting (XSS) in editor parameter
Media
CVE-2020-19850
Directus API vulnerable to denial of service
Alta
CVE-2023-28427
Prototype pollution in matrix-js-sdk (part 2)
Media
CVE-2023-26117
angular vulnerable to regular expression denial of service via the $resource service
Media
CVE-2023-26116
angular vulnerable to regular expression denial of service via the angular.copy() utility
Media
CVE-2023-26118
angular vulnerable to regular expression denial of service via the <input type="url"> element
Alta
CVE-2023-28103
Prototype pollution in matrix-react-sdk
Alta
CVE-2022-36060
matrix-react-sdk Prototype pollution vulnerability
Alta
CVE-2022-36059
matrix-js-sdk Prototype Pollution vulnerability
Crítica
CVE-2023-28444
angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
Media
CVE-2023-28443
directus vulnerable to Insertion of Sensitive Information into Log File
Crítica
CVE-2023-26114
code-server vulnerable to Missing Origin Validation in WebSockets
Alta
CVE-2023-26113
Collection.js vulnerable to Prototype Pollution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.