Media
ghsa-f3q4-ggfp-jv34
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2024-45047
Svelte has a potential mXSS vulnerability due to improper HTML escaping
Alta
CVE-2024-7435
Attire <= 2.0.6 - Authenticated (Contributor+) PHP Object Injection
Media
CVE-2024-3886
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
Media
CVE-2024-45270
Carousel Slider <= 2.2.3 - Cross-Site Request Forgery
Media
CVE-2024-5212
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
Media
CVE-2024-45269
Carousel Slider <= 1.10.2 - Cross-Site Request Forgery
Media
CVE-2022-4536
IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass
Media
CVE-2022-4539
Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass
Media
CVE-2022-4100
WP Cerber Security <= 9.4 - IP Protection Bypass
Alta
CVE-2024-8252
Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2024-7122
Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Media
CVE-2024-45302
CRLF Injection in RestSharp's `RestRequest.AddHeader` method
Media
CVE-2024-44930
Serilog Client IP Spoofing vulnerability
Media
CVE-2024-45232
"powermail" (powermail) Insecure Direct Object Reference (IDOR)
Alta
CVE-2024-45048
XXE in PHPSpreadsheet encoding is returned
Media
CVE-2024-45046
PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information
Alta
CVE-2024-43805
HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
Alta
CVE-2024-41964
Kirby has insufficient permission checks in the language settings
Media
CVE-2024-3998
Betheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2024-2694
Betheme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection
Media
CVE-2024-5879
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 11.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget
Media
CVE-2024-8296
FeehiCMS User[avatar] unrestricted upload
Media
CVE-2024-5024
MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.