Media
CVE-2024-47049
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.070
Restablecer filtros
Media
CVE-2024-47047
powermail TYPO3 extension has Insecure Direct Object Reference
Media
CVE-2024-45612
Contao affected by insert tag injection via canonical URL
Media
CVE-2024-45604
Contao affected by directory traversal in the file selector widget
Alta
CVE-2024-45398
Contao affected by remote command execution through file upload
Media
CVE-2024-8661
Concrete CMS Stored XSS in the "Next&Previous Nav" block
Sin evaluar
CVE-2024-13275
drupal/seckit - SA-CONTRIB-2024-039
Media
CVE-2024-45592
auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped
Crítica
CVE-2024-44902
ThinkPHP deserialization vulnerability
Media
CVE-2024-45411
Timber <= 1.23.1 - Use of a Vulnerable Dependency
Media
CVE-2024-45406
Craft CMS vulnerable to stored XSS in breadcrumb list and title fields
Media
ghsa-gcfg-hmwx-wq5h
Httpful is Missing Certificate Validation
Sin evaluar
CVE-2024-13272
drupal/paragraphs_table - SA-CONTRIB-2024-036
Sin evaluar
CVE-2024-13271
drupal/content_entity_clone - SA-CONTRIB-2024-035
Sin evaluar
CVE-2024-13270
drupal/freelinking - SA-CONTRIB-2024-034
Alta
ghsa-hq76-662x-7mw4
Pimcore includes vulnerable PHPOffice/PhpSpreadsheet
Media
CVE-2024-45232
"powermail" (powermail) Insecure Direct Object Reference (IDOR)
Alta
CVE-2024-45048
XXE in PHPSpreadsheet encoding is returned
Media
CVE-2024-45046
PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information
Alta
CVE-2024-41964
Kirby has insufficient permission checks in the language settings
Media
CVE-2024-8296
FeehiCMS User[avatar] unrestricted upload
Media
CVE-2024-45440
Drupal Full Path Disclosure
Media
CVE-2024-8295
FeehiCMS BannerForm[img] unrestricted upload
Media
CVE-2024-8294
FeehiCMS file upload vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.