Media
CVE-2024-9173
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2024-8861
ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-46488
Heap-based Buffer Overflow in sqlite-vec
Alta
CVE-2024-46489
Remote command execution in promptr
Media
CVE-2024-47082
Cross-Site Request Forgery (CSRF) in strawberry-graphql
Media
CVE-2024-45613
Cross-site scripting (XSS) in the clipboard package
Alta
CVE-2024-7781
Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover
Alta
CVE-2024-22893
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing
Alta
CVE-2024-22892
OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords.
Media
CVE-2024-8803
Bulk NoIndex & NoFollow Toolkit <= 2.15 - Reflected Cross-Site Scripting
Media
CVE-2024-8723
012 PS Multi Languages <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Baja
CVE-2024-23454
Apache Hadoop: Temporary File Local Information Disclosure
Media
CVE-2024-8291
Cross site scripting in Concrete CMS
Media
CVE-2024-7398
Cross site scripting in Concrete CMS
Media
CVE-2024-9148
Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting
Media
CVE-2024-46935
Denial of service in rocket chat message parser
Alta
CVE-2024-39928
Apache Linkis Spark EngineConn: Commons Lang's RandomStringUtils Random string security vulnerability
Alta
CVE-2024-47324
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Authenticated (Contributor+) Local File Inclusion
Crítica
CVE-2024-47323
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Unauthenticated Local File Inclusion
Alta
CVE-2022-4541
WordPress Visitors <= 1.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Header
Media
CVE-2024-8771
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Media
CVE-2024-9025
Sight – Professional Image Gallery and Portfolio <= 1.1.2 - Missing Authorization to Sensitive Information Exposure in handler_post_title
Media
CVE-2024-47325
Multiple Page Generator Plugin – MPG <= 3.4.7 - Authenticated (Contributor+) SQL Injection
Media
CVE-2024-47311
Wheel of Life <= 1.1.8 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.