Crítica
CVE-2021-3838
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.070
Restablecer filtros
Crítica
CVE-2021-3902
Improper Restriction of XML External Entity Reference in dompdf/dompdf
Media
CVE-2021-3841
Cross site scripting in sylius/sylius
Alta
CVE-2024-52306
FileManager Deserialization of Untrusted Data vulnerability
Media
CVE-2024-52305
UnoPim Stored XSS : Cookie hijacking through Create User function
Alta
CVE-2024-51996
Symfony has an Authentication Bypass via RememberMe
Sin evaluar
CVE-2024-13294
drupal/postfile - SA-CONTRIB-2024-060
Sin evaluar
CVE-2024-13293
drupal/postfile - SA-CONTRIB-2024-059
Media
CVE-2024-48900
Moodle IDOR when accessing list of badge recipients
Alta
CVE-2024-52293
Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI
Alta
CVE-2024-52292
Craft CMS Arbitrary System File Read
Alta
CVE-2024-52291
Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Alta
CVE-2024-52301
Laravel environment manipulation via query string
Alta
CVE-2024-51093
Cross Site Scripting vulnerability in Snipe-IT
Media
CVE-2024-51992
Orchid Platform has Method Exposure Vulnerability in Modals
Media
CVE-2024-43439
Moodle reflected XSS via H5P error message
Baja
CVE-2024-43437
Moodle Cross-site Scripting vulnerability
Baja
CVE-2024-43430
Moodle has insufficient access control
Baja
CVE-2024-43432
Moodle authorization headers preserved between "emulated redirects"
Baja
CVE-2024-43435
Moodle has insufficient capability checks
Baja
CVE-2024-43427
Moodle admin presets export tool includes some secrets that should not be exported
Baja
CVE-2024-43433
Moodle's user/power level management inconsistent with suspended users
Baja
CVE-2024-43429
Moodle has user information visibility control issues in gradebook reports
Media
CVE-2024-51434
Froala WYSIWYG editor allows cross-site scripting (XSS)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.