Media
CVE-2023-48295
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 620
Restablecer filtros
Media
CVE-2023-46745
LibreNMS vulnerable to rate limiting bypass on login page
Media
CVE-2023-46722
Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews
Alta
CVE-2023-46245
Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
Media
CVE-2023-43340
Evolution CMS Cross-site Scripting vulnerability
Media
CVE-2023-43341
Evolution CMS Cross-site Scripting vulnerability
Media
CVE-2023-43875
Subrion CMS vulnerable to Cross-site Scripting
Media
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Crítica
CVE-2023-43661
Cachet vulnerable to Authenticated Remote Code Execution
Baja
CVE-2023-38219
Magento Open Source allows Cross-Site Scripting (XSS)
Media
CVE-2022-35950
OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item
Media
CVE-2023-43884
Subrion CMS Cross-site Scripting vulnerability
Media
CVE-2023-43828
Subrion CMS Cross-site Scripting vulnerability in /panel/languages
Media
CVE-2023-43830
Subrion CMS XSS in /panel/configuration/financial/
Alta
CVE-2023-54390
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)
Crítica
CVE-2023-41330
Snappy PHAR deserialization vulnerability
Media
CVE-2023-38970
Badaso vulnerable to cross-site scripting
Alta
CVE-2023-37897
grav Server-side Template Injection (SSTI) mitigation bypass
Media
CVE-2023-37785
ImpressCMS Cross-site Scripting vulnerability
Baja
CVE-2023-37269
Winter CMS stored XSS through privileged upload of SVG file
Alta
CVE-2023-34448
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Alta
CVE-2023-34253
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
Alta
CVE-2023-34252
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Crítica
CVE-2023-34251
Grav Server Side Template Injection (SSTI) vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.