Media
CVE-2024-32869
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Crítica
CVE-2024-21511
MySQL2 for Node Arbitrary Code Injection
Media
CVE-2024-2324
FileOrganizer and FileOrganizer Pro <= 1.0.6 - Authenticated Stored Cross-Site Scripting
Alta
CVE-2024-32960
Booking Ultra Pro <= 1.1.12 - Authenticated (Contributor+) Privilege Escalation
Media
CVE-2023-7030
Collapse-O-Matic <= 1.8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-4077
UDesign <= 4.7.3 - Reflected Cross-Site Scripting
Media
CVE-2024-32958
Slash Admin <= 3.8.1 - Cross-Site Request Forgery
Media
CVE-2024-32957
Page Builder: Live Composer <= 1.5.38 - Missing Authorization
Alta
CVE-2024-3895
WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Media
CVE-2024-3885
Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-3241
Ultimate Blocks <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading
Crítica
CVE-2024-32959
Sirv <= 7.2.2 - Missing Authorization to Arbitrary Options Update
Media
CVE-2024-3585
Send PDF for Contact Form 7 <= 1.0.2.3 - Missing Authorization
Media
CVE-2024-32961
Blocksy <= 2.0.33 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
ghsa-p72q-h37j-3hq7
dbt uses a SQLparse version with a high vulnerability
Alta
CVE-2024-34347
@hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE
Alta
CVE-2024-32480
LibreNMS vulnerable to a Time-Based Blind SQL injection leads to database extraction
Alta
CVE-2024-32479
LibreNMS uses Improper Sanitization on Service template name leads to Stored XSS
Alta
CVE-2024-32461
LibreNMS vulnerable to SQL injection time-based leads to database extraction
Baja
ghsa-hvp5-5x4f-33fq
JADX file override vulnerability
Alta
CVE-2024-32656
Ant Media Server vulnerable to a local privilege escalation
Crítica
Explotada en ataques
CVE-2024-27348
Apache HugeGraph-Server: Command execution in gremlin
Alta
CVE-2024-27349
Apache HugeGraph-Server: Bypass whitelist in Auth mode
Media
CVE-2024-27347
Apache HugeGraph-Hubble: SSRF in Hubble connection page
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.