Media
CVE-2024-22204
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2024-22417
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and
Alta
CVE-2024-28425
greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/pickle_utils.py. This vulnerability allows attackers to execute arbitrary code v
Media
CVE-2024-23823
vantage6's CORS settings overly permissive
Media
CVE-2024-28849
follow-redirects' Proxy-Authorization header kept across hosts
Media
CVE-2024-28746
Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permissions to access resources such as variables, connections, etc from the UI which t
Alta
CVE-2024-1795
HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection
Media
CVE-2024-2399
Premium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-2335
Elements Plus! <= 2.16.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links
Alta
CVE-2024-1991
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.0.0 - Authenticated (Subscriber+) Privilege Escalation
Media
CVE-2024-1796
HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-1571
WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed
Media
CVE-2024-2249
LA-Studio Element Kit for Elementor <= 1.3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-1960
ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link
Media
CVE-2024-2423
UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-2256
oik <= 4.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Crítica
CVE-2024-28394
External Control of File Name or Path in Advanced Plugins - Sales Reports, Statistics, Custom Fields & Export module for PrestaShop
Alta
CVE-2024-28392
Improper neutralization of SQL parameter in Abandoned Cart Reminder Pro module for PrestaShop
Alta
CVE-2024-28396
Exposure of Sensitive Information to an Unauthorized Actor in MyPrestaModules - Orders (CSV, Excel) Export PRO module for PrestaShop
Crítica
CVE-2024-28395
Improper neutralization of SQL parameter in Best-Kit - Pop-up / Schedule Popup / Splash window module for PrestaShop
Media
CVE-2023-36238
Bagisto vulnerable to Insecure Direct Object Reference (IDOR)
Media
CVE-2024-23672
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
Media
CVE-2024-24549
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
Alta
ghsa-2x7m-gf85-3745
Remote Denial of Service Vulnerability in Microsoft QUIC
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.