Sin evaluar
drupal-contrib-2023-053
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.071
Restablecer filtros
Alta
CVE-2023-49087
Validation of SignedInfo
Media
CVE-2023-32065
OroCommerce get-totals-for-checkout API endpoint returns unwanted data
Media
CVE-2023-32064
OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility
Media
CVE-2023-32063
OroCRMCallBundle has incorrect call view page visibility
Media
CVE-2023-32062
OroCalendarBundle has incorrect system calendar events visibility
Alta
CVE-2022-41951
OroPlatform vulnerable to path traversal during temporary file manipulations
Alta
CVE-2023-49075
Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls
Media
CVE-2023-49146
Cross-site Scripting in DOMSanitizer
Media
CVE-2023-48707
Cleartext Storage of Sensitive Information in HMAC SHA256 Authentication
Media
CVE-2023-48708
Insertion of Sensitive Information into Log
Alta
CVE-2023-48701
Cross-site Scripting via uploaded assets
Alta
CVE-2023-47350
Cross Site Request Forgery in SwiftyEdit
Media
CVE-2023-47380
Cross-site Scripting in Admidio
Media
CVE-2023-48294
LibreNMS has Broken Access control on Graphs Feature
Media
CVE-2023-48295
LibreNMS Cross-site Scripting at Device groups Deletion feature
Media
CVE-2023-46745
LibreNMS vulnerable to rate limiting bypass on login page
Media
CVE-2023-48648
Concrete CMS allows unauthorized access because directories can be created with insecure permissions
Baja
CVE-2023-48649
Concrete CMS Cross-site Scripting vulnerability
Media
ghsa-w98g-5fmx-wm4x
pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory
Media
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
Alta
CVE-2023-47637
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
Media
CVE-2023-47636
pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document
Sin evaluar
drupal-contrib-2023-052
drupal/mollie - SA-CONTRIB-2023-052
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.