Alta
CVE-2023-26105
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Alta
CVE-2023-26104
Denial of Service vulnerability in lite-web-server
Alta
CVE-2022-44310
ecdh vulnerable to Exposure of Resource to Wrong Sphere
Crítica
CVE-2023-22578
Sequelize - Default support for “raw attributes” when using parentheses
Alta
CVE-2023-26102
rangy vulnerable to Prototype Pollution
Media
CVE-2022-48345
@braintree/sanitize-url Cross-site Scripting vulnerability
Crítica
CVE-2023-22579
Unsafe fall-through in getWhereConditions
Crítica
CVE-2023-25813
Sequelize vulnerable to SQL Injection via replacements
Crítica
CVE-2023-25805
Versionn Command Injection Vulnerability
Media
CVE-2021-32860
iziModal Cross-site Scripting vulnerability
Media
CVE-2021-32859
Baremetrics date range picker vulnerable to Cross-site Scripting
Media
CVE-2021-32855
Vditor Cross-site Scripting vulnerability
Media
CVE-2021-32854
textAngular Cross-site Scripting vulnerability
Media
CVE-2021-32853
Erxes vulnerable to Cross-site Scripting
Media
CVE-2021-32851
Mind-elixir Cross-site Scripting vulnerability
Media
CVE-2021-32850
@claviska/jquery-minicolors vulnerable to Cross-site Scripting
Media
CVE-2016-15025
generator-hottowel Cross-site Scripting vulnerability
Media
CVE-2022-48115
Cross-site Scripting in jspreadsheet
Media
CVE-2023-23936
CRLF Injection in Nodejs ‘undici’ via host
Alta
CVE-2023-24807
Regular Expression Denial of Service in Headers
Alta
CVE-2023-25653
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
Media
CVE-2025-27098
Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler
Media
CVE-2023-22580
Sequelize information disclosure vulnerability
Alta
CVE-2023-25576
Denial of service due to unlimited number of parts
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.