Media
CVE-2023-1979
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2022-4537
Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass
Media
CVE-2023-29385
WP Abstracts <= 2.6.1 - Reflected Cross-Site Scripting
Alta
03d8b8e7-5702-42d4-8cd9-ae3ff1a74a7e
Zero Spam for WordPress <= 5.4.4 - Authenticated(Administrator+) SQL Injection
Crítica
CVE-2023-31047
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been suppor
Media
CVE-2023-31144
craftcms/cms vulnerable to cross site scripting in RSS feed widget
Media
CVE-2023-2516
Cross Site Scripting in nilsteampassnet/teampass
Alta
CVE-2023-2550
Cross Site Scripting in thorsten/phpmyfaq
Media
CVE-2023-2427
Cross Site Scripting in thorsten/phpmyfaq
Alta
CVE-2021-40331
Apache Ranger Hive Plugin missing permissions check
Alta
CVE-2023-32235
Path Traversal in Ghost
Crítica
CVE-2023-2531
AzuraCast missing brute force prevention
Alta
CVE-2023-27321
Uncontrolled Resource Consumption in OPC UA .NET Standard Reference Server
Media
CVE-2023-31048
Exposure of Sensitive Information in OPC UA .NET Standard Reference Server
Media
CVE-2023-30093
ONOS vulnerable to Cross-site Scripting
Media
CVE-2023-32237
TheGem < 5.8.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Alta
7c1e005f-c0f1-4dff-928b-18919f117048
TK Google Fonts GDPR Compliant <= 2.2.7 - Authorization Bypass
Alta
CVE-2023-32128
Cryptocurrency Donation Box – Bitcoin & Crypto Donations <= 2.2.7 - Authenticated (Administrator+) SQL Injection
Media
CVE-2022-41786
WP Job Portal <= 2.0.1 - Cross-Site Request Forgery to Settings Modification
Media
CVE-2022-36424
Easy Appointments <= 3.11.9 - Cross-Site Request Forgery via multiple AJAX actions
Media
CVE-2023-27607
Points and Rewards for WooCommerce <= 1.5.0 - Cross-Site Request Forgery to Settings Change
Media
CVE-2023-27630
Community by PeepSo <= 6.0.9.0 - Missing Authorization to Sensitive Information Exposure
Media
CVE-2023-32119
WPO365 | Mail Integration for Office 365 / Outlook <= 1.9.0 - reflected Cross-Site Scripting via error_description
Media
CVE-2023-27608
Points and Rewards for WooCommerce <= 1.5.0 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.