Baja
CVE-2023-49089
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.125
Restablecer filtros
Media
CVE-2023-48313
DOM-XSS on Backoffice login screen.
Baja
CVE-2023-48227
Backoffice User can bypass "Publish" restriction
Baja
CVE-2023-38694
Possible injection of HTML into user invite mails
Baja
ghsa-w4x6-hh3x-wjrx
Stale copy of the public suffix list
Media
CVE-2023-26154
pubnub Insufficient Entropy vulnerability
Media
CVE-2023-49289
Ajax Pro Cross-site Scripting
Baja
CVE-2021-22143
Exposure of Sensitive Information in Elastic APM .NET Agent
Media
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
Alta
CVE-2023-36049
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
Media
CVE-2023-36558
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
Media
CVE-2023-45819
TinyMCE XSS vulnerability in notificationManager.open API
Media
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Media
CVE-2023-45814
Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free
Alta
CVE-2023-36435
MsQuic Remote Denial of Service Vulnerability
Alta
CVE-2023-38171
Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel
Media
CVE-2023-36566
Microsoft Common Data Model SDK Denial of Service Vulnerability
Alta
CVE-2023-36414
Azure Identity SDK Remote Code Execution Vulnerability
Alta
ghsa-wqcr-xm43-hpqr
Vulnerable version of libwebp and can be exploited with a malicious source image
Alta
ghsa-4c29-gfrp-g6x9
CefSharp affected by libvpx's heap buffer overflow in vp8 encoding
Media
CVE-2023-44390
HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content
Alta
ghsa-7vpr-3ppw-qrpj
Imageflow affected by libwebp zero-day and should not be used with malicious source images.
Crítica
ghsa-j646-gj5p-p45g
CefSharp affected by heap buffer overflow in WebP
Alta
CVE-2023-41890
Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.