Crítica
CVE-2023-34577
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Crítica
CVE-2023-34576
Improper neutralization of SQL parameter in Opart Faq for PrestaShop
Crítica
CVE-2023-33831
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA
Alta
CVE-2023-42443
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Media
CVE-2023-42441
Vyper has incorrect re-entrancy lock when key is empty string
Alta
CVE-2023-4759
Arbitrary File Overwrite in Eclipse JGit
Media
CVE-2022-24093
Magento Open Source affected by Improper Input Validation
Media
CVE-2023-4950
Funnelforms Free <= 3.3.9 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-5054
Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending
Media
CVE-2023-50886
Legal Pages <= 1.3.7 - Missing Authorization on 'deleteLegalTemplate'
Alta
9dd1e52c-83b7-4b3e-a791-a2c0ccd856bc
wpDiscuz <= 7.6.5 - Unauthenticated SQL Injection
Media
CVE-2023-51371
Bit Assist <= 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-4961
Poptin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
35027df9-ae55-453f-bb42-4b2664d66293
Statify – Extended Evaluation <= 2.6.3 - Authenticated (Admin+) CSV Injection
Media
CVE-2023-4975
Website Builder by SeedProd <= 6.15.13.1 - Cross-Site Request Forgery to Settings Update
Media
1a2fb050-1a7c-45cc-86c7-02331d47f780
WPSchoolPress <= 2.2.4 - Cross-Site Request Forgery
Sin evaluar
808
LazyDbBackup - Other
Alta
CVE-2023-42439
GeoNode vulnerable to SSRF Bypass to return internal host data
Alta
ghsa-22rr-f3p8-5gf8
Directus affected by VM2 sandbox escape vulnerability
Baja
CVE-2023-41900
Jetty's OpenId Revoked authentication allows one request
Media
CVE-2023-4977
LibreNMS Code Injection vulnerability
Media
CVE-2023-4981
LibreNMS Cross-site Scripting vulnerability
Media
CVE-2023-4982
LibreNMS Cross-site Scripting vulnerability
Media
CVE-2023-4980
LibreNMS Cross-site Scripting vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.