Media
ghsa-97jm-g33h-f46g
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
ghsa-mpqj-f4v3-334h
Silverstripe Cross-site scripting vulnerability in VersionedRequestFilter
Media
ghsa-vj2j-6g3w-4662
Silverstripe Missing CSRF protection in login form
Crítica
ghsa-8v6m-7f5v-hhx6
Silverstripe Brute force bypass on default admin
Media
ghsa-m8v7-x398-pxrf
Silverstripe XSS in CMS Edit Page
Media
ghsa-87pf-7x99-5xc4
Silverstripe Hostname, IP and Protocol Spoofing through HTTP Headers
Media
ghsa-2hpc-mf4q-j885
Silverstripe CSRF vulnerability in GridFieldAddExistingAutocompleter
Media
ghsa-x5w2-wcr8-9q45
Silverstripe Missing security check on dev/build/defaults
Media
CVE-2024-5060
LottieFiles – JSON Based Animation Lottie & Bodymovin for Elementor <= 1.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
ghsa-qp29-wcc2-vmpc
Silverstripe HtmlEditor embed url sanitisation
Media
CVE-2024-0893
Schema App Structured Data <= 2.2.0 - Missing Authorization
Media
CVE-2024-1376
Event post <= 5.9.4 - Missing Authorization
Media
ghsa-j982-5jv7-v43r
Silverstripe Form field validation message XSS vulnerability
Media
CVE-2024-1332
Custom Fonts – Host Your Fonts Locally <= 2.1.4 - Authenticated (Author+) Stored Cross-Site Scripting
Media
ghsa-mqf5-275h-gf6r
Silverstripe framework is vulnerable to XSS in install.php
Media
ghsa-g4hp-pfvf-vm5w
SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation
Media
ghsa-hq4p-5mpr-jj9m
Silverstripe XSS in dev/build returnURL Parameter
Media
ghsa-vp8p-c6xj-xpj7
Silverstripe External redirection risk in Security?ReturnURL
Alta
CVE-2024-0867
Email Log <= 2.4.8 - Unauthenticated Hook Injection
Media
CVE-2024-1134
SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
ghsa-25gq-jvx2-vg9x
Silverstripe X-Forwarded-Host request hostname injection
Media
ghsa-jqp8-v74p-g8px
Silverstripe XSS in Director::force_redirect()
Alta
CVE-2024-1974
HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal
Media
CVE-2024-3557
WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.