Media
CVE-2024-48911
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2024-6763
Eclipse Jetty URI parsing of invalid authority
Media
CVE-2024-8184
Eclipse Jetty's ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks
Baja
CVE-2024-6762
Eclipse Jetty's PushSessionCacheFilter can cause remote DoS attacks
Media
CVE-2024-7318
Keycloaks's One Time Passcode (OTP) is valid longer than expiration timeSeverity
Media
CVE-2024-8883
Keycloak has Vulnerable Redirect URI Validation Results in Open Redirect
Alta
CVE-2024-8698
Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak
Media
CVE-2024-47885
DOM Clobbering Gadget found in astro's client-side router that leads to XSS
Media
CVE-2024-9895
Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode
Media
CVE-2024-47831
Denial of Service condition in Next.js image optimization
Alta
CVE-2024-9837
AADMY – Add Auto Date Month Year Into Posts <= 2.0.1 - Unauthenticated Arbitrary Shortcode Execution
Alta
CVE-2023-50780
Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans
Media
CVE-2024-9944
WooCommerce <= 9.0.2 - Unauthenticated HTML Injection
Media
CVE-2024-9823
Eclipse Jetty has a denial of service vulnerability on DosFilter
Media
CVE-2024-6757
Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function
Media
CVE-2024-9546
WPIDE <= 3.4.9 - Unauthenticated Full Path Dislcosure
Alta
CVE-2024-9548
Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting
Crítica
CVE-2024-49257
Azz Anonim Posting <= 0.9 - Unauthenticated Arbitrary File Upload
Media
CVE-2024-49262
Country Flags for Elementor <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2024-49217
Adding drop down roles in registration <= 1.1 - Unauthenticated Privilege Escalation
Media
CVE-2024-49268
Disconnected <= 1.3.0 - Reflected Cross-Site Scripting
Media
CVE-2024-49273
ProfileGrid <= 5.9.3 - Cross-Site Request Forgery
Media
CVE-2024-49240
AB Categories Search Widget <= 0.2.5 - Reflected Cross-Site Scripting
Media
CVE-2024-49274
VOD Infomaniak <= 1.5.7 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.