Baja
CVE-2024-35239
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.125
Restablecer filtros
Media
CVE-2024-35218
Umbraco CMS Vulnerable to Stored XSS on Content Page Through Markdown Editor Preview Pane
Media
CVE-2024-34071
Umbraco CMS Open Redirect Bypass Protection
Media
CVE-2024-30046
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
Media
CVE-2024-30045
Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability
Media
CVE-2024-30054
Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability
Media
CVE-2024-30171
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")
Media
CVE-2024-30172
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
Media
CVE-2024-29857
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
Alta
CVE-2024-32655
Npgsql vulnerable to SQL Injection via Protocol Message Size Overflow
Media
CVE-2024-32872
Umbraco Workflow's Backoffice users can execute arbitrary SQL
Alta
CVE-2024-21409
.NET Elevation of Privilege Vulnerability
Media
CVE-2024-29035
Blind SSRF Leads to Port Scan by using Webhooks
Baja
CVE-2024-27086
MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service
Media
CVE-2024-32036
SixLabors.ImageSharp vulnerable to data leakage
Media
CVE-2024-32035
SixLabors.ImageSharp vulnerable to Memory Allocation with Excessive Size Value
Media
CVE-2024-32028
Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore
Media
CVE-2024-29992
Azure Identity Library for .NET Information Disclosure Vulnerability
Media
CVE-2024-29203
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
Media
CVE-2024-29881
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
Alta
CVE-2024-29187
WiX based installers are vulnerable to binary hijack when run as SYSTEM
Alta
CVE-2024-29188
Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files
Alta
ghsa-g4v6-69p6-q3p4
WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM
Alta
ghsa-wq88-fq4x-h2pm
WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.