Media
CVE-2023-7229
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.543
Alta
CVE-2023-7228
illi Link Party! <= 1.0 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-7195
WP-Reply Notify <= 1.1 - Cross-Site Request Forgery to Settings Update
Media
CVE-2023-7088
Add SVG Support for Media Uploader | inventivo <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Media
CVE-2024-0665
WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting
Media
CVE-2024-0249
Advanced Schedule Posts <= 2.1.8 - Reflected Cross-Site Scripting
Media
CVE-2023-7196
Ultimate Noindex Nofollow Tool <= 1.1.2 - Cross-Site Request Forgery to Settings Update
Media
CVE-2023-7231
illi Link Party! <= 1.0 - Missing Authorization to Unauthenticated Arbitrary Link Deletion
Media
CVE-2023-5932
Travelpayouts <= 1.1.13 - Reflected Cross-Site Scripting
Media
CVE-2023-7174
aBitGone CommentSafe <= 1.0.0 - Cross-Site Request Forgery to Settings Update and Cross-Site Request Forgery
Alta
CVE-2024-22233
Spring Framework server Web DoS Vulnerability
Crítica
CVE-2017-20189
Clojure classes can be used to craft a serialized object that runs arbitrary code on deserialization
Crítica
CVE-2024-23752
Code execution in pandasai
Crítica
CVE-2024-23751
LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorS
Alta
CVE-2024-23750
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.
Media
CVE-2023-6953
PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting
Media
CVE-2024-0703
Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-0612
Content Views <= 3.6.2 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings
Media
CVE-2024-0587
Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting
Media
CVE-2023-6591
Popup Box Business (7.0.0 - 7.9.0) and Developer (20.0.0 - 20.9.0) - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2024-0761
File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
Crítica
CVE-2024-23730
Unsafe yaml deserialization in llama-hub
Media
CVE-2024-23732
The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.
Crítica
CVE-2024-23731
The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.