Media
CVE-2023-46637
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-46621
User Avatar <= 1.4.11 - Reflected Cross-Site Scripting
Media
CVE-2023-52147
All In One WP Security <= 5.2.4 - Protection Bypass of Renamed Login Page via URL Encoding
Media
CVE-2023-46628
WP Word Count <= 3.2.4 - Missing Authorization via calculate_statistics
Media
CVE-2023-46643
Download CloudNet360 <= 3.2.0 - Reflected Cross-Site Scripting
Media
CVE-2023-46629
Remove Add to Cart WooCommerce <= 1.4.4 - Cross-Site Request Forgery to Settings Modification
Media
CVE-2023-46640
Medialist <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2023-46625
Autolinks Manager <= 1.10.04 - Cross-Site Request Forgery
Media
CVE-2023-46642
SAHU TikTok Pixel for E-Commerce <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-46627
WP Simple HTML Sitemap <= 2.2 - Reflected Cross-Site Scripting via id
Media
CVE-2023-46639
kk Star Ratings <= 5.4.5 - Missing Authorization
Media
CVE-2023-46636
Custom Header Images <= 1.2.1 - Cross-Site Request Forgery
Alta
CVE-2023-46630
Admin and Site Enhancements (ASE) <= 5.7.1 - Password Protection Mode Security Feature Bypass
Media
CVE-2023-5705
VK Filter Search <= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Crítica
CVE-2023-27846
Improper neutralization of SQL parameter in tvcmsblog module by themevolty for PrestaShop
Crítica
CVE-2023-36263
Improper neutralization of SQL parameter in Opart limit quantity for PrestaShop
Crítica
CVE-2023-43139
Improper Neutralization of Special Elements used in an OS Command in the Franfinance module for PrestaShop
Alta
CVE-2023-43795
WPS Server Side Request Forgery vulnerability
Media
CVE-2023-41339
Unsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRF
Baja
CVE-2023-46122
sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)
Media
CVE-2023-46120
RabbitMQ Java client's Lack of Message Size Limitation leads to Remote DoS Attack
Alta
CVE-2023-46119
Parse Server may crash when uploading file without extension
Media
CVE-2023-44760
Concrete CMS Cross-site Scripting vulnerability
Media
CVE-2023-46607
WP iCal Availability <= 1.0.3 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.