Media
CVE-2022-4533
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2024-9838
Auto Affiliate Links <= 6.4.6 - Authenticated (Admin+) SQL Injection
Media
CVE-2024-42404
Welcart e-Commerce <= 2.11.1 - Authenticated (Admin+) SQL Injection
Media
CVE-2024-8850
MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting
Media
CVE-2024-4629
Keycloak Services has a potential bypass of brute force protection
Alta
CVE-2024-46982
Next.js Cache Poisoning
Media
CVE-2024-46976
@backstage/plugin-techdocs-backend vulnerable to circumvention of cross site scripting protection
Alta
CVE-2024-8946
A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulat
Baja
CVE-2024-45384
druid-pac4j, Apache Druid extension, has Padding Oracle vulnerability
Baja
CVE-2024-45537
Apache Druid: Users can provide MySQL JDBC properties not on allow list
Alta
CVE-2024-8947
A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use a
Alta
CVE-2024-8948
A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffer
Media
CVE-2024-8660
Concrete CMS stored XSS vulnerability in the "Top Navigator Bar" block
Alta
CVE-2024-45816
@backstage/plugin-techdocs-backend storage bucket Directory Traversal vulnerability
Alta
CVE-2024-45815
@backstage/plugin-catalog-backend Prototype Pollution vulnerability
Crítica
ghsa-2gh6-wc3m-g37f
hermes-management is vulnerable to RCE due to Apache commons-jxpath
Media
CVE-2024-45812
Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSS
Media
CVE-2024-45811
Vite's `server.fs.deny` is bypassed when using `?import&raw`
Alta
ghsa-534c-hcr7-67jg
Kimai has an XXE Leading to Local File Read
Media
CVE-2024-45803
Wire UI has a JS XSS Vulnerability on route /wireui/button?label=Content
Media
CVE-2024-47049
czim/file-handling vulnerable to SSRF and directory traversal
Media
CVE-2024-47047
powermail TYPO3 extension has Insecure Direct Object Reference
Media
CVE-2024-45612
Contao affected by insert tag injection via canonical URL
Media
CVE-2024-45604
Contao affected by directory traversal in the file selector widget
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.