Alta
CVE-2023-35133
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.406
Restablecer filtros
Crítica
CVE-2023-35169
php-imap vulnerable to RCE through a directory traversal vulnerability
Media
CVE-2020-20697
NodCMS Cross Site Scripting vulnerability
Alta
CVE-2023-34448
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Alta
CVE-2023-34253
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
Alta
CVE-2023-34252
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Crítica
CVE-2023-34251
Grav Server Side Template Injection (SSTI) vulnerability
Baja
CVE-2023-29293
Magento Open Source affected by Improper Input Validation
Media
CVE-2023-2984
Pimcore vulnerable to Pre-Auth Path Traversal in pimcore_log parameter
Alta
CVE-2023-7332
PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash
Alta
CVE-2023-54393
PocketMine-MP vulnerable to server crash with certain invalid JSON payloads in `LoginPacket` due to vulnerable dependency
Media
CVE-2023-33196
Craft CMS stored XSS in review volume
Media
CVE-2023-33195
Craft CMS XSS in RSS widget feed
Baja
CVE-2023-33194
CraftCMS stored XSS in Quick Post widget error message
Media
CVE-2023-2881
Pimcore customers' list user password hash is disclosed
Alta
CVE-2023-2859
Code injection in nilsteampassnet/teampass
Alta
CVE-2023-32679
Craft CMS vulnerable to Remote Code Execution via unrestricted file extension
Crítica
CVE-2023-32692
Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4
Alta
CVE-2023-2665
RosarioSIS Stores Sensitive Data in a Mechanism without Access Control
Media
CVE-2023-26044
ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limits
Alta
CVE-2023-2756
pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment query
Alta
CVE-2023-32073
WWBN AVideo command injection vulnerability
Alta
CVE-2023-2629
Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection
Media
CVE-2023-2616
Pimcore Cross-site Scripting (XSS) in Static Routes name field
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.