Wysoka
CVE-2024-45855
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 593
Wysoka
CVE-2024-45854
Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a ‘describ
Wysoka
CVE-2024-45851
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Wysoka
CVE-2024-45852
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.
Wysoka
CVE-2024-45853
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used for a
Wysoka
CVE-2024-45848
An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’
Wysoka
CVE-2024-45849
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Wysoka
CVE-2024-45850
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Wysoka
CVE-2024-45846
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT
Średnia
CVE-2024-8656
WPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting
Wysoka
CVE-2022-2446
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization
Średnia
CVE-2024-8734
Lucas String Replace <= 2.0.5 - Reflected Cross-Site Scripting
Średnia
CVE-2024-45460
Flipping Cards <= 1.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
Średnia
CVE-2024-45455
WP Meta SEO <= 4.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Wysoka
CVE-2024-7423
Stream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update
Średnia
CVE-2024-45456
WP Meta SEO <= 4.5.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Średnia
CVE-2024-45459
Product Slider for WooCommerce <= 1.13.50 - Reflected Cross-Site Scripting
Średnia
CVE-2024-5628
Avada | Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode
Średnia
CVE-2024-8731
Cron Jobs <= 1.2.9 - Reflected Cross-Site Scripting
Wysoka
CVE-2024-8269
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
Średnia
CVE-2024-45457
Spiffy Calendar <= 4.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Średnia
CVE-2024-8714
WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting
Średnia
CVE-2024-45458
Spiffy Calendar <= 4.9.13 - Reflected Cross-Site Scripting
Średnia
CVE-2024-43237
WordPress Tag Cloud Plugin – Tag Groups <= 2.0.3 - Missing Authorization to Information Exposure
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.