Media
CVE-2023-31230
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2023-24397
Reservation.Studio widget <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-23893
Simple Giveaways <= 2.46.0 - Missing Authorization via AJAX actions
Media
CVE-2023-39989
Header Footer Code Manager <= 1.1.34 - Cross-Site Request Forgery via process_bulk_action
Media
CVE-2023-36695
Sublanguage <= 2.9 - Missing Authorization
Media
CVE-2023-36692
WP-Cirrus <= 0.6.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Crítica
CVE-2023-36258
An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALChain in the python exec method.
Alta
CVE-2023-36814
Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module
Alta
CVE-2023-36053
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large numb
Crítica
CVE-2023-35797
Apache Airflow Hive Provider Beeline remote code execution with Principal
Media
CVE-2023-3345
Masteriyo - LMS for WordPress <= 1.6.7 - Sensitive Information Exposure
Media
CVE-2023-3248
All-in-one Floating Contact Form <= 2.1.1 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
Media
CVE-2023-2309
wpForo Forum <= 2.1.8 - Reflected Cross-Site Scripting via 'wpforo_debug'
Media
CVE-2023-3344
Auto Location for WP Job Manager via Google <= 1.0 - Authenticated (Administrator+) Stored Cross Site Scripting
Media
CVE-2023-26136
tough-cookie Prototype Pollution vulnerability
Alta
CVE-2023-30589
llhttp vulnerable to HTTP request smuggling
Media
e8596412-53d5-45ed-998a-49799bd269d0
Image Regenerate & Select Crop <= 7.1.0 - Cross-Site Request Forgery on multiple AJAX actions
Media
b0eb165f-c979-4318-8362-ca47500ed845
Image Regenerate & Select Crop <= 7.1.0 - Missing Authorization on multiple AJAX actions
Media
50f69182-66c0-4d3a-aabe-015b72937f3e
WP Social AutoConnect <= 4.6.1 - Cross-Site Request Forgery via jfb_admin_page
Crítica
CVE-2023-36812
Remote Code Execution for 2.4.1 and earlier
Crítica
CVE-2023-31543
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server.
Crítica
CVE-2023-36468
Upgrading doesn't prevent exploiting vulnerable XWiki documents
Crítica
CVE-2023-36469
XWiki Platform vulnerable to Code injection through NotificationRSSService
Crítica
CVE-2023-36470
XWiki Platform vulnerable to Code Injection in icon themes
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.