Media
CVE-2023-49798
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 764
Restablecer filtros
Media
CVE-2023-47440
Directory Traversal in Gladys Assistant
Media
CVE-2023-48223
JWT Algorithm Confusion
Alta
CVE-2023-48238
json-web-token library is vulnerable to a JWT algorithm confusion attack
Alta
CVE-2023-43646
Chaijs/get-func-name vulnerable to ReDoS
Media
CVE-2023-40014
OpenZeppelin Contracts vulnerable to Improper Escaping of Output
Media
CVE-2023-38698
.eth registrar controller can shorten the duration of registered names
Alta
CVE-2023-37478
pnpm incorrectly parses tar archives relative to specification
Media
CVE-2023-34459
OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
Media
CVE-2023-34234
OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning
Media
CVE-2023-33187
html inputs of type password recorded in plaintext when converted to text inputs
Media
CVE-2023-32325
Potential for cross-site scripting in PostHog-js
Alta
CVE-2023-30542
GovernorCompatibilityBravo may trim proposal calldata
Alta
Explotada en ataques
CVE-2023-22894
Strapi leaking sensitive user information by filtering on private fields
Media
CVE-2023-30543
`chainId` may be outdated if user changes chains as part of connection in @web3-react
Alta
ghsa-xv3q-jrmm-4fxv
Authentication Bypass in @strapi/plugin-users-permissions
Media
CVE-2023-30541
OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated
Crítica
CVE-2023-29017
vm2 vulnerable to sandbox escape
Alta
CVE-2023-29008
SvelteKit framework has Insufficient CSRF protection for CORS requests
Media
CVE-2023-26117
angular vulnerable to regular expression denial of service via the $resource service
Media
CVE-2023-26116
angular vulnerable to regular expression denial of service via the angular.copy() utility
Media
CVE-2023-26118
angular vulnerable to regular expression denial of service via the <input type="url"> element
Media
CVE-2023-27481
Directus vulnerable to extraction of password hashes through export querying
Media
CVE-2023-26488
OpenZeppelin Contracts contains Incorrect Calculation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.