Media
CVE-2022-24895
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.071
Restablecer filtros
Sin evaluar
drupal-contrib-2023-005
drupal/apigee_edge - SA-CONTRIB-2023-005
Media
CVE-2023-0608
Microweber contains Cross-site Scripting
Crítica
CVE-2023-23924
Dompdf vulnerable to URI validation failure on SVG parsing
Media
CVE-2023-0565
Froxlor contains Business Logic Errors
Media
CVE-2023-0566
Froxlor contains Static Code Injection
Media
CVE-2023-0572
Froxlor contains Unchecked Error Condition
Media
CVE-2016-15022
CImage Cross-site Scripting vulnerability
Alta
CVE-2023-0564
Froxlor contains Weak Password Requirements
Alta
CVE-2021-41231
DataFlow upload remote code execution vulnerability
Alta
CVE-2021-41144
Fix for authenticated remote code execution through layout update
Media
CVE-2023-23617
DoS vulnerability in MaliciousCode filter
Alta
CVE-2021-41143
Fix for arbitrary file deletion in customer media allows for remote code execution
Alta
CVE-2021-39217
Fix for arbitrary command execution in custom layout update through blocks
Crítica
CVE-2020-22452
phpmyadmin contains SQL Injection vulnerability
Alta
ghsa-g3j5-mpp2-2fqm
symfont/process typosquatting malware spoofs symfony/process
Media
CVE-2021-21395
magento-lts Reset Password not protected against well-timed CSRF
Alta
CVE-2020-36655
Command injection in yiisoft/yii2-gii
Media
ghsa-xwhj-pqcg-8rcr
CakePHP vulnerable to Cross-site Scripting in some development error pages
Media
ghsa-p76f-wr22-4rv6
CakePHP vulnerable to Remote File Inclusion through View template name manipulation
Media
ghsa-6hg4-vp5q-47mw
CakePHP allows direct access of prefixed controller actions
Alta
ghsa-q79m-c546-2g63
CakePHP vulnerable to Denial of Service attack through XML payloads
Media
ghsa-j9q2-f9q7-jhgq
CakePHP SecurityComponent cross form submission issue
Media
CVE-2023-22734
Shopware has Improper Input Validation issue in newsletter subscription
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.