Alta
CVE-2023-25164
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2023-0735
Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Media
CVE-2023-0736
Cross-site Scripting (XSS) in wallabag/wallabag
Alta
CVE-2022-4265
Replyable – Subscribe to Comments and Reply by Email <= 2.2.9 - Authenticated (Subscriber+) PHP Object Injection via prompt_dismiss_notice
Media
CVE-2023-25447
ColorWay <= 4.2.3 - Cross Site Request Forgery
Media
CVE-2023-0292
Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion
Media
CVE-2022-45837
微信机器人高级版 <= 6.2.1 - Reflected Cross Site Scripting
Alta
CVE-2022-44580
Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2022-47419
Mayan EDMS DMS XSS vulnerability
Alta
CVE-2023-25194
Apache Kafka Connect vulnerable to Deserialization of Untrusted Data
Media
CVE-2023-23931
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
Crítica
CVE-2023-24813
URI validation failure on SVG parsing. Bypass of CVE-2023-23924
Media
CVE-2023-0723
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object
Media
CVE-2023-0711
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
Media
CVE-2023-0715
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
Media
CVE-2023-0729
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
Media
CVE-2023-0719
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order
Media
CVE-2023-0731
Interactive Geo Maps <= 1.5.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Media
CVE-2023-0720
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order
Media
CVE-2022-46855
Responsive Pricing Table <= 5.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-1110
Yellow Yard Searchbar <= 2.7.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-0725
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder
Alta
CVE-2022-47155
Slider by Supsystic <= 1.8.6 - Cross-Site Request Forgery
Media
CVE-2023-0727
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.