Crítica
CVE-2023-22884
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.855
Restablecer filtros
Media
CVE-2023-0406
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
Media
CVE-2023-0398
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
Alta
CVE-2021-32837
mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6. If a
Alta
CVE-2022-43719
Apache Superset vulnerable to Cross-Site Request Forgery via legacy REST API endpoints
Media
CVE-2022-43718
Apache Superset is vulnerable to Cross-Site Scripting (XSS)
Media
CVE-2022-41703
Apache Superset's SQL Alchemy connector vulnerable to SQL Injection
Media
CVE-2022-43717
Apache Superset vulnerable to Cross-site Scripting
Media
CVE-2022-43720
Apache Superset vulnerable to Injection
Media
CVE-2022-43721
Apache Superset Open Redirect vulnerability
Media
CVE-2022-45438
Apache Superset has Improper Access Control
Crítica
CVE-2023-0297
Code Injection in pyload-ng
Media
ghsa-h6p3-p4vx-wr8q
dompurify vulnerable to Cross-site Scripting
Media
ghsa-pgjv-jrg2-gq3v
dompurify vulnerable to Cross-site Scripting
Media
CVE-2019-25095
A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site script
Media
CVE-2016-15010
** UNSUPPPORTED WHEN ASSIGNED **** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerabi
Crítica
CVE-2022-45875
Apache DolphinScheduler vulnerable to Improper Input Validation
Media
CVE-2022-4719
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Alta
CVE-2022-4720
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Crítica
CVE-2022-4724
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Alta
CVE-2022-4722
Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Alta
CVE-2022-4723
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Media
CVE-2022-4721
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Alta
ghsa-g86j-hwg9-77q5
SentinelOne impersonated via PyPI packages
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.