Media
CVE-2024-39645
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2024-39654
Sign-up Sheets <= 2.2.12 - Missing Authorization
Crítica
CVE-2024-5057
Easy Digital Downloads <= 3.2.12 - Unauthenticated SQL Injection
Media
CVE-2024-39652
WooCommerce PDF Vouchers <= 4.9.4 - Reflected Cross-Site Scripting
Media
CVE-2024-8542
Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2024-39663
WP Fast Total Search <= 1.68.232 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2024-39659
WP-PostRatings <= 1.91.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-7389
Forminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure
Media
CVE-2024-39657
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.18 - Cross-Site Request Forgery
Media
CVE-2024-39660
Photo Engine <= 6.3.1 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2024-6346
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget
Media
ghsa-55p7-v223-x366
IdentityServer Open Redirect vulnerability
Media
CVE-2024-41948
biscuit-java vulnerable to public key confusion in third party block
Media
CVE-2024-23444
Elasticsearch stores private key on disk unencrypted
Media
CVE-2024-7302
Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
Media
CVE-2024-5331
Breakdance <= 1.7.2 - Missing Authorization
Media
CVE-2024-5330
Breakdance <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
ghsa-gc5h-6jx9-q2qh
eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Crítica
CVE-2024-41947
XWiki Platform vulnerable to Cross-Site Scripting (XSS) through conflict resolution
Media
CVE-2024-2455
Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL
Sin evaluar
CVE-2024-13262
drupal/view_password - SA-CONTRIB-2024-026
Media
CVE-2024-2090
Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery
Media
CVE-2024-39694
IdentityServer Open Redirect vulnerability
Media
CVE-2024-39318
Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.