Media
CVE-2023-48320
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-38400
Enfold <= 5.6.4 - Reflected Cross-Site Scripting
Media
CVE-2023-48739
Porto Theme - Functionality <= 2.11.1 - Missing Authorization
Alta
CVE-2023-48319
Salon booking system < 8.7 - Authenticated (Editor+) Privilege Escalation
Alta
CVE-2023-48742
License Manager for WooCommerce <= 2.2.10 - Authenticated (Administrator+) SQL Injection
Media
CVE-2023-48331
MyBookTable Bookstore <= 3.3.3 - Cross-Site Request Forgery
Crítica
CVE-2023-46349
Improper neutralization of SQL parameter in MyPrestaModules - Product Catalog (CSV, Excel) Export/Update module for PrestaShop
Crítica
CVE-2023-48188
Improper neutralization of SQL parameter in Opart Devis for PrestaShop
Alta
CVE-2023-46355
Exposure of Private Personal Information to an Unauthorized Actor in Bl Modules - CSV Feeds PRO module for PrestaShop
Alta
CVE-2023-48701
Cross-site Scripting via uploaded assets
Media
CVE-2023-47467
Directory Traversal in jeecg-boot
Alta
CVE-2023-47350
Cross Site Request Forgery in SwiftyEdit
Alta
CVE-2023-48705
Cross-site Scripting potential in custom links, job buttons, and computed fields
Media
CVE-2023-47380
Cross-site Scripting in Admidio
Media
CVE-2023-46673
Elasticsearch Improper Handling of Exceptional Conditions
Crítica
CVE-2023-37924
Apache Software Foundation Apache Submarine has an SQL injection vulnerability when a user logs in. This issue can result in unauthorized login.
Alta
CVE-2021-37942
APM Java Agent Local Privilege Escalation issue
Baja
CVE-2021-22143
Exposure of Sensitive Information in Elastic APM .NET Agent
Alta
CVE-2023-5504
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
Media
dbf54852-f3fe-4c9e-9348-44a73f9a8131
WooCommerce Parcel Pro <= 1.6.11 - Cross-Site Request Forgery
Media
CVE-2023-48277
Super Progressive Web Apps <= 2.2.21 - Missing Authorization
Media
c146f89c-5df3-4aaf-b880-0ce6016dfb6d
GS Team Members <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-48275
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Media
CVE-2023-48700
Clear Text Credentials Exposed via Onboarding Task
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.