Media
CVE-2024-51821
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2024-51903
WP Listings Pro <= 3.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-51936
ESB Testimonials <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-24538
BuddyPress Groups Extras <= 3.6.10 - Cross-Site Request Forgery
Media
CVE-2024-51874
ParOne Feeds <= 1.17.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-51940
WP Responsive Video <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-51860
Custom Dashboard Widget <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-10325
Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Media
CVE-2024-51987
HTTP Client uses incorrect token after refresh
Alta
CVE-2024-47072
XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream
Media
CVE-2024-10187
myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
Media
CVE-2024-10269
Easy SVG Support <= 3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Media
CVE-2024-10621
Simple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2015-3542
PHPExcel XXE Vulnerability
Baja
CVE-2024-51758
Filament has exported files stored in default (`public`) filesystem if not reconfigured
Media
CVE-2024-43436
Moodle vulnerable to site administration SQL injection via XMLDB editor
Media
CVE-2024-43438
Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users
Media
CVE-2024-43426
Moodle has arbitrary file read risk through pdfTeX
Media
CVE-2024-43440
Moodle LFI vulnerability when restoring malformed block backups
Alta
CVE-2024-43425
Moodle Remote Code Execution vulnerability
Media
CVE-2024-43428
Moodle vulnerable to cache poisoning via injection into storage
Media
CVE-2024-43431
Moodle's IDOR in badges allows deletion of arbitrary badges
Alta
CVE-2024-43434
Moodle has CSRF risk in Feedback non-respondents report
Alta
CVE-2024-51504
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.