Baja
ghsa-68jh-rf6x-836f
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.493
Restablecer filtros
Crítica
CVE-2023-3224
nuxt Code Injection vulnerability
Media
CVE-2021-26920
Druid ingestion system Authenticated users can read data from other sources than intended
Alta
CVE-2023-34232
Snowflake NodeJS Driver vulnerable to Command Injection
Media
CVE-2023-34238
Gatsby develop server has Local File Inclusion vulnerability
Alta
CVE-2023-34092
Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)
Media
CVE-2023-32689
Phishing attack vulnerability by uploading malicious HTML file
Media
CVE-2023-33187
html inputs of type password recorded in plaintext when converted to text inputs
Media
CVE-2023-32695
Insufficient validation when decoding a Socket.IO packet
Media
CVE-2023-32688
Invalid push request payload crashes Parse Server
Crítica
CVE-2023-2583
jsreport vulnerable to code injection
Media
CVE-2023-31125
engine.io Uncaught Exception vulnerability
Alta
CVE-2023-29019
Session fixation in fastify-passport
Media
CVE-2023-27495
Bypass of CSRF protection in the presence of predictable userInfo
Media
CVE-2023-30548
Path traversal vulnerability in gatsby-plugin-sharp
Crítica
CVE-2023-22621
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
Alta
Explotada en ataques
CVE-2023-22894
Strapi leaking sensitive user information by filtering on private fields
Alta
CVE-2023-29008
SvelteKit framework has Insufficient CSRF protection for CORS requests
Alta
CVE-2023-0835
markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS)
Alta
CVE-2023-29003
SvelteKit vulnerable to Cross-Site Request Forgery
Alta
CVE-2023-28427
Prototype pollution in matrix-js-sdk (part 2)
Alta
CVE-2023-28103
Prototype pollution in matrix-react-sdk
Crítica
CVE-2023-28444
angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
Crítica
CVE-2023-26114
code-server vulnerable to Missing Origin Validation in WebSockets
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.