Alta
CVE-2024-28181
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Alta
CVE-2024-28252
CoreWCF NetFraming based services can leave connections open when they should be closed
Baja
ghsa-879p-8gw4-mcpw
fgr Vulnerable to Insecure Default Variable Initialization
Media
CVE-2024-2497
RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php`
Crítica
CVE-2024-28752
SSRF vulnerability using the Aegis DataBinding in Apache CXF
Media
CVE-2024-23944
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling
Media
CVE-2024-2509
Gutenberg Blocks by Kadence Blocks <= 3.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-29099
Evergreen Content Poster <= 1.4.1 - Reflected Cross-Site Scripting
Media
CVE-2024-27997
Visual Composer Website Builder <= 45.6.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Media
CVE-2024-29098
WP Calameo <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-6525
ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting
Media
CVE-2024-27987
GiveWP <= 3.3.1 - Reflected Cross-Site Scripting
Media
CVE-2024-27995
ARMember <= 4.0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-27990
The Moneytizer <= 9.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-27993
Calendarista Basic Edition <= 3.0.2 - Unauthenticated Cross-Site Scripting
Alta
CVE-2024-1812
Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url
Media
CVE-2024-29089
Five Star Restaurant Menu <= 2.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-27994
YITH WooCommerce Product Add-Ons <= 4.5.0 - Unuathenticated Cross-Site Scripting
Media
CVE-2024-2042
ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
Media
CVE-2024-2294
Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal
Media
CVE-2024-27996
Survey Maker <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2024-29102
Extensions For CF7 <= 3.0.6 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2024-2287
Knight Lab Timeline <= 3.9.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-29091
WP Armour – Honeypot Anti Spam <= 2.1.13 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.