Alta
CVE-2022-47599
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2022-47600
Mass Email To users <= 1.1.4 - Unauthenticated Reflected Cross-Site Scripting via 'entrant'
Media
CVE-2022-46821
Emails & Newsletters with Jackmail <= 1.2.22 - Authenticated (Subscriber+) CSV Injecton
Media
CVE-2022-47604
AJAX Thumbnail Rebuild <= 1.13 - Missing Authorization
Alta
CVE-2023-30854
Remote code injection in wwbn/avideo
Media
ghsa-jgvc-jfgh-rjvv
Chosen Ciphertext Attack in Jose4j
Media
CVE-2023-30852
Arbitrary File Read in Admin JS CSS files
Media
CVE-2023-2340
Cross-site Scripting (XSS) in DataObject columns grid
Media
CVE-2023-2339
Cross-site Scripting (XSS) in DataObject Any Getter grid operator
Media
CVE-2023-2336
Path Traversal in Asset "import from server" option
Media
CVE-2023-2332
Cross-site Scripting (XSS) in Conditions tab of Pricing Rules
Media
CVE-2023-29471
Lightbend Alpakka Kafka logs credentials on debug level
Media
CVE-2023-2328
Cross-site Scripting (XSS) in DataObjects QuantityValue Unit Definition
Media
CVE-2023-2327
Cross-site Scripting (XSS) in pimcore via DataObject Class date fields
Media
CVE-2023-2323
Cross-site Scripting (XSS) in Ecommerce Pricing Rules name field
Media
CVE-2023-2322
Cross-site Scripting (XSS) in Document Properties Parameter
Alta
CVE-2023-2338
SQL Injection in AssetController
Media
CVE-2023-2342
Cross-site Scripting (XSS) in Website Settings name field
Media
CVE-2023-2341
Cross-site Scripting (XSS) in Admin Login too many attempts notice
Media
CVE-2023-2343
Cross-site Scripting (XSS) in DataObject Classification Store
Alta
CVE-2023-30850
SQL Injection in Admin Translations API
Alta
CVE-2023-30849
SQL Injection in Translation Export API
Alta
CVE-2023-30848
SQL Injection in Admin Search Find API
Crítica
CVE-2023-30349
Remote code execution in JFinal CMS
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.