Crítica
CVE-2024-25108
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.071
Restablecer filtros
Media
CVE-2024-1439
Moodle Improper Access Control vulnerability
Baja
CVE-2024-1247
Concrete CMS vulnerable to stored XSS via the Role Name field
Baja
CVE-2024-1246
Concrete CMS vulnerable to reflected XSS via the Image URL Import Feature
Baja
CVE-2024-1245
Concrete CMS vulnerable to stored XSS in file tags and description attributes
Media
CVE-2023-31506
Cross-site scripting (XSS) vulnerability in Grav
Alta
CVE-2023-25365
October CMS Cross-site Scripting vulnerability
Alta
CVE-2024-24821
Composer code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php
Media
CVE-2024-24822
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Sin evaluar
CVE-2024-13244
drupal/migrate_tools - SA-CONTRIB-2024-008
Media
CVE-2024-24815
CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection
Baja
CVE-2024-24807
Sulu HTML Injection via Autocomplete Suggestion
Media
CVE-2024-24574
phpMyFAQ vulnerable to stored XSS on attachments filename
Media
CVE-2024-22208
phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes
Media
CVE-2024-22202
phpMyFAQ User Removal Page Allows Spoofing Of User Details
Media
CVE-2006-5734
PHPMailer Local file inclusion
Alta
CVE-2007-3215
PHPMailer Shell command injection
Baja
CVE-2024-24754
Bref vulnerable to Body Parsing Inconsistency in Event-Driven Functions
Media
CVE-2024-24753
Bref Doesn't Support Multiple Value Headers in ApiGatewayFormatV2
Media
CVE-2024-24752
Bref's Uploaded Files Not Deleted in Event-Driven Functions
Alta
CVE-2024-24570
Statmic CMS vulnerable to account takeover via XSS and password reset link
Media
ghsa-29w6-c52g-m8jc
C5 Firefly III CSV Injection.
Sin evaluar
CVE-2024-13243
drupal/entity_delete_log - SA-CONTRIB-2024-007
Alta
CVE-2023-36260
Craft CMS Feed-Me
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.