Alta
CVE-2023-41578
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Crítica
CVE-2023-42268
Jeecg boot SQL Injection vulnerability
Alta
CVE-2023-39584
Hexo `include_code` has a path traversal
Crítica
CVE-2023-41330
Snappy PHAR deserialization vulnerability
Media
CVE-2023-41646
Buttercup allows attackers to obtain the hash of the master password
Media
e4dc8f18-d990-4e41-8bf8-dfa9de4c0f6e
WP Crowdfunding <= 2.1.5 - Cross-Site Request Forgery
Media
d7d08bfd-9861-4e21-a696-25b00233ad94
EWWW Image Optimizer <= 7.2.0 - Sensitive Information Exposure
Media
CVE-2023-4757
Staff / Employee Business Directory for Active Directory <= 1.2.1 - Insufficient Escaping of Stored LDAP Values
Media
CVE-2023-4838
Simple Download Counter <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-41952
Contact Form for Plugin by Fluent Forms <= 5.0.8 - Insecure Direct Object Reference
Media
CVE-2023-41050
Information disclosure in AccessControl
Alta
CVE-2023-4536
My Account Page Editor <= 1.3.1 - Authenticated (Subscriber+) Arbitrary File Upload
Media
ee595f48-b72f-4569-a248-7dbd0b9152ae
Easy Form by AYS <= 1.3.8 - Cross-Site Request Forgery
Crítica
CVE-2023-4666
Form Maker by 10Web <= 1.15.19 - Unauthenticated Arbitrary File Upload
Media
CVE-2023-51375
EmbedPress <= 3.8.3 - Cross-Site Request Forgery
Media
CVE-2023-39676
XSS in FieldPopupNewsletter Prestashop Module
Media
CVE-2023-39677
PHPInfo Exposure in MyPrestaModules SimpleImportProduct and UpdateProducts Modules
Crítica
CVE-2023-39675
Improper neutralization of a SQL parameter in simpleimportproduct from MyPrestaModules module for PrestaShop
Media
CVE-2023-41327
WireMock Controlled Server Side Request Forgery vulnerability through URL
Media
CVE-2023-39956
Electron vulnerable to out-of-package code execution when launched with arbitrary cwd
Media
CVE-2023-29198
Electron context isolation bypass via nested unserializable return value
Alta
CVE-2023-23623
Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled
Sin evaluar
drupal-contrib-2023-044
drupal/webprofiler - SA-CONTRIB-2023-044
Media
CVE-2023-39265
Apache Superset Improper Input Validation vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.