Alta
CVE-2023-1970
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.406
Restablecer filtros
Media
CVE-2023-1971
yuan1994 tpAdmin vulnerable to Server-Side Request Forgery
Media
CVE-2023-1885
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via category field name parameter
Media
CVE-2023-1884
thorsten/phpmyfaq vulnerable to cross-site scripting (XSS) via stopword parameter
Alta
CVE-2023-1882
thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameter
Alta
CVE-2023-1880
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter
Media
CVE-2023-1879
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via updatecategory parameter
Alta
CVE-2023-1878
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via adminlog
Alta
CVE-2023-1758
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter
Alta
CVE-2023-1757
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter
Media
CVE-2023-1756
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via HTML export
Media
CVE-2023-28851
Silverstripe Form Capture vulnerable to stored cross-site-scripting
Media
CVE-2023-28850
Pimcore Perspective Editor vulnerable to stored cross-site scripting (XSS) in perspective name
Alta
CVE-2023-27159
Appwrite Server-Side Request Forgery vulnerability
Media
CVE-2023-1701
Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings
Media
CVE-2023-1702
Pimcore Cross-site Scripting in Predefined Asset Metadata module in Settings
Media
CVE-2023-1704
pimcore is vulnerable to cross-site scripting in translate module
Media
CVE-2023-22250
Magento Open Source allows Improper Access Control
Alta
CVE-2023-24788
NotrinosERP vulnerable to SQL Injection
Media
CVE-2023-28330
Moodle arbitrary file read vulnerability
Crítica
CVE-2023-28333
Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input
Alta
CVE-2023-28329
Moodle SQL Injection vulnerability
Crítica
CVE-2023-25655
baserCMS allows any file to be uploaded
Media
CVE-2023-28429
Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.