Media
CVE-2023-28673
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Alta
CVE-2023-28670
Jenkins Pipeline Aggregator View Plugin vulnerable to Cross-site Scripting
Alta
CVE-2023-28683
Jenkins Phabricator Differential Plugin vulnerable to XML external entity (XXE) attacks
Alta
CVE-2023-28684
Jenkins remote-jobs-view-plugin vulnerable to XML external entity attacks
Alta
CVE-2023-28682
Jenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks
Alta
CVE-2023-27025
RuoYi vulnerable to arbitrary file download
Media
CVE-2023-23719
Premmerce <= 1.3.18 - Cross-Site Request Forgery via runAction
Media
CVE-2023-1789
Firefly III vulnerable to improper input validation
Media
CVE-2023-1404
Weaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name
Alta
ghsa-5x5q-8cgm-2hjq
Karate has vulnerable dependency on json-smart package (CVE-2023-1370)
Crítica
CVE-2023-29141
X-Forwarded-For header allows brute-forcing autoblocked IP addresses
Alta
CVE-2023-27159
Appwrite Server-Side Request Forgery vulnerability
Crítica
CVE-2023-27162
OpenAPI Generator vulnerable to Server-Side Request Forgery
Crítica
CVE-2023-1784
jeecg-boot vulnerable to improper authentication
Alta
CVE-2022-4899
zstd vulnerable to buffer overrun
Media
CVE-2023-1701
Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings
Media
CVE-2023-1702
Pimcore Cross-site Scripting in Predefined Asset Metadata module in Settings
Media
CVE-2023-1704
pimcore is vulnerable to cross-site scripting in translate module
Media
CVE-2023-1760
phpMyFAQ Stored Cross-site Scripting vulnerability
Media
CVE-2023-1759
phpMyFAQ Stored Cross-site Scripting vulnerability
Media
CVE-2023-1755
phpMyFAQ Cross-site Scripting vulnerability
Media
CVE-2023-1754
phpMyFAQ vulnerable to improper input validation
Media
CVE-2023-1753
phpMyFAQ has weak password requirements
Alta
CVE-2023-1762
thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.