Media
CVE-2023-1761
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Crítica
CVE-2023-1741
jeecg-boot vulnerable to SQL injection
Media
CVE-2023-28991
Order date time for WooCommerce <= 3.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-47161
Health Check & Troubleshooting <= 1.5.1 - Cross-Site Request Forgery via health_check_troubleshoot_get_captures
Media
CVE-2023-23801
Really Simple Google Tag Manager <= 1.0.6 - Cross-Site Request Forgery via plugin_activation
Alta
CVE-2023-28992
Coupon Affiliates <= 5.4.3 - Unauthenticated Stored Cross-Site Scripting
Media
9a999044-5d4a-4415-a3b9-28c564e63a25
Responsive Vertical Icon Menu <= 1.5.8 - Reflected Cross-Site Scripting via 'id'
Media
98730677-200b-4b1a-8568-7af8b2b0e94b
Welcome Bar <= 2.0.3 - Missing Authorization
Media
82a26836-44fc-47cf-ad09-bd3d264e8635
Welcome Bar <= 2.0.3 - Cross-Site Request Forgery
Media
CVE-2023-29093
Conditional cart fee / Extra charge rule for WooCommerce extra fees <= 1.0.96 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
71548a7f-43a5-4f71-8add-45f675e8aa66
Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-23812
Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
0b3fa78c-d97f-43bf-b3e9-47d6aa41b458
Advanced Local Pickup for WooCommerce <= 1.5.2 - Cross-Site Request Forgery
Crítica
CVE-2023-28843
Improper neutralization of SQL parameter in PayPal module for PrestaShop 1.6 and 1.5
Crítica
CVE-2023-28462
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
Alta
CVE-2023-28427
Prototype pollution in matrix-js-sdk (part 2)
Media
CVE-2022-23522
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Crítica
CVE-2023-1712
Use of hard-coded, security-relevant constants in deepset-ai/haystack
Alta
CVE-2023-28935
Apache UIMA DUCC allows remote code execution
Media
CVE-2023-26117
angular vulnerable to regular expression denial of service via the $resource service
Media
CVE-2023-26116
angular vulnerable to regular expression denial of service via the angular.copy() utility
Media
CVE-2023-26118
angular vulnerable to regular expression denial of service via the <input type="url"> element
Media
CVE-2023-23792
Swatchly – WooCommerce Variation Swatches for Products <= 1.2.0 - Cross-Site Request Forgery via plugin_activation
Media
efc53d78-a664-48d0-a752-00c56b3f792f
No CAPTCHA reCAPTCHA for WooCommerce <= 1.2.6 - Missing Authorization to Notification Dismissal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.