Alta
CVE-2023-54390
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 388
Restablecer filtros
Crítica
CVE-2023-41330
Snappy PHAR deserialization vulnerability
Alta
CVE-2023-40035
Craft CMS vulnerable to Remote Code Execution via validatePath bypass
Alta
CVE-2023-37897
grav Server-side Template Injection (SSTI) mitigation bypass
Alta
CVE-2023-34448
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Alta
CVE-2023-34253
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
Alta
CVE-2023-34252
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Alta
CVE-2023-54393
PocketMine-MP vulnerable to server crash with certain invalid JSON payloads in `LoginPacket` due to vulnerable dependency
Alta
CVE-2023-32679
Craft CMS vulnerable to Remote Code Execution via unrestricted file extension
Crítica
CVE-2023-32692
Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4
Alta
CVE-2023-2017
Shopware Has Improper Control of Generation of Code in Twig rendered views
Sin evaluar
drupal-contrib-2023-012
drupal/xray_audit - SA-CONTRIB-2023-012
Alta
CVE-2023-25575
api-platform/core's secured properties may be accessible within collections
Crítica
CVE-2023-24813
URI validation failure on SVG parsing. Bypass of CVE-2023-23924
Crítica
CVE-2023-23924
Dompdf vulnerable to URI validation failure on SVG parsing
Sin evaluar
drupal-contrib-2022-058
drupal/twig_field_value - SA-CONTRIB-2022-058
Alta
CVE-2022-31140
Valinor error messages leading to potential data exfiltration before v0.12.0
Media
CVE-2021-41559
Quadratic blowup in Convert::xml2array()
Media
CVE-2021-41924
Cross-site Scripting in krayin/laravel-crm
Media
CVE-2022-29711
Cross site scripting in librenms
Media
CVE-2022-51011
Denial-of-service vulnerability processing large chat messages containing many newlines
Crítica
CVE-2018-7269
Yii SQL injection vulnerability
Media
CVE-2013-4729
phpMyAdmin Global variables scope injection vulnerability
Alta
CVE-2016-3169
Drupal saving user accounts can sometimes grant the user all roles
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.