Media
CVE-2023-38501
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2023-37902
ecrecover can return undefined data if signature does not verify
Alta
CVE-2023-36826
Improper authorization on debug and artifact file downloads
Media
ghsa-m8fw-p3cr-6jqc
Cross-Site Scripting in CKEditor4 WordCount Plugin
Media
CVE-2023-38435
Cross-site Scripting in healthcheck webconsole plugin
Media
CVE-2023-38500
By-passing Cross-Site Scripting Protection in HTML Sanitizer
Baja
CVE-2023-38499
Information Disclosure due to Out-of-scope Site Resolution
Alta
CVE-2023-38493
Paths contain matrix variables bypass decorators
Media
CVE-2023-2850
Unintentional leakage of private information via cross-origin websocket session hijacking
Alta
CVE-2023-37460
Arbitrary File Creation in AbstractUnArchiver
Media
CVE-2023-36806
Cross site scripting via input unit widget
Alta
CVE-2023-34235
Leaking sensitive user information still possible by filtering on private with prefix fields
Media
CVE-2023-34093
Making all attributes on a content-type public without noticing it
Crítica
CVE-2023-37895
Remote code execution in Apache Jackrabbit
Media
CVE-2024-23685
Hard-coded System User Credentials in Folio Data Export Spring module
Crítica
CVE-2023-26045
Path traversal and code execution via prototype vulnerability
Crítica
CVE-2024-23687
Hard-coded System User Credentials in Folio Data Export Spring module
Alta
CVE-2023-34434
JDBC URL bypassing by allowLoadLocalInfileInPath param
Crítica
CVE-2023-35088
SQL injection in audit endpoint
Media
CVE-2023-34189
Apache InLong: General user can delete and update process
Media
CVE-2023-38393
Ninja Forms <= 3.6.25 - Missing Authorization to Form Submission Export
Alta
c5ce2d08-6e01-4a7c-a2d5-ba98639107a8
MultiParcels Shipping For WooCommerce <= 1.15.5 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-35777
The Events Calendar <= 6.1.2.2 - Missing Authorization
Baja
CVE-2023-3947
Video Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.