Media
CVE-2024-5451
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Alta
CVE-2024-38374
Improper Restriction of XML External Entity Reference in org.cyclonedx:cyclonedx-core-java
Crítica
CVE-2024-6028
Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
Media
CVE-2023-49793
CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
Crítica
CVE-2024-38369
XWiki programming rights may be inherited by inclusion
Alta
CVE-2024-5431
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
Crítica
CVE-2024-29868
Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation
Media
CVE-2024-27136
Cross site scripting in Apache JSPWiki
Media
CVE-2024-6075
WP eStore <= 8.5.4 - Cross-Site Request Forgery to Coupon Deletion
Media
CVE-2024-6073
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Discount Editing
Media
CVE-2024-6307
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API
Alta
CVE-2024-5630
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Arbitrary File Upload
Media
CVE-2024-6072
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via REQUEST_URI
Media
CVE-2024-6074
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Customer Editing
Media
CVE-2024-3249
Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification
Media
CVE-2024-6076
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Category Editing
Media
CVE-2024-6289
WPS Hide Login <= 1.9.16.3 - Login Page Disclosure
Media
CVE-2024-32111
WordPress Core < 6.5.5 - Authenticated (Contributor+) Directory Traversal
Media
CVE-2024-31111
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Template Part Block
Crítica
CVE-2024-5443
Remote Code Execution via path traversal bypass in lollms
Alta
CVE-2024-21518
Zip slip in opencart
Alta
CVE-2024-21519
Arbitrary File Creation in opencart
Media
CVE-2024-21515
Cross site scripting in opencart
Media
CVE-2024-21516
Cross site scripting in opencart
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.