Media
ghsa-g776-759r-pf6x
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 400
Restablecer filtros
Crítica
ghsa-cc97-g92w-jm65
TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution
Media
ghsa-m2hh-2m46-x6j5
silverstripe/framework may disclose database credentials during connection failure
Media
ghsa-r3pr-fh25-wrfc
silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms
Media
ghsa-55qg-6c4m-mw6g
silverstripe/framework's URL parameters `isDev` and `isTest` unguarded
Baja
ghsa-f5pp-pmq8-gp46
Passbolt Api Retrieval of HTTP-only cookies
Crítica
ghsa-6q9v-4hq6-5m67
Doctrine SQL injection vulnerability
Alta
ghsa-76w8-mqx4-wjrf
Doctrine DBAL SQL injection possibility
Baja
ghsa-qvgg-r6rq-vwfx
datadog/dd-trace Circumvents open_basedir INI directive
Media
CVE-2024-34081
Mantis Bug Tracker (MantisBT) vulnerable to cross-site scripting
Alta
CVE-2024-34077
Mantis Bug Tracker (MantisBT) allows user account takeover in the signup/reset password process
Alta
CVE-2024-32480
LibreNMS vulnerable to a Time-Based Blind SQL injection leads to database extraction
Alta
CVE-2024-32461
LibreNMS vulnerable to SQL injection time-based leads to database extraction
Media
CVE-2023-45824
Pinned entity creation form shows wrong data
Media
CVE-2024-28859
Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency
Media
CVE-2023-30451
Path Traversal in TYPO3 File Abstraction Layer Storages
Alta
CVE-2024-25121
TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler
Media
CVE-2024-24752
Bref's Uploaded Files Not Deleted in Event-Driven Functions
Sin evaluar
CVE-2024-13243
drupal/entity_delete_log - SA-CONTRIB-2024-007
Media
CVE-2024-21667
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts
Media
CVE-2023-51651
Potential URI resolution path traversal in the AWS SDK for PHP
Media
CVE-2023-49282
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
Alta
CVE-2023-38519
MainWP <= 4.4.3.3 - Authenticated (Administrator+) SQL Injection
Alta
CVE-2023-46245
Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.