Crítica
CVE-2024-40624
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2024-39919
@jmondi/url-to-png enables capture screenshot of localhost web services (unauthenticated pages)
Media
CVE-2024-39918
@jmondi/url-to-png contains a Path Traversal vulnerability
Media
CVE-2024-4780
Image Hover Effects – Elementor Addon <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link Parameter
Media
CVE-2024-39912
The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames
Media
CVE-2024-6557
SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure
Alta
CVE-2023-49566
Apache Linkis DataSource's JDBC Datasource Module with DB2 has JNDI Injection vulnerability
Alta
CVE-2023-41916
Apache Linkis DataSource allows arbitrary file reading
Alta
CVE-2023-46801
Apache Linkis DataSource remote code execution vulnerability
Crítica
CVE-2024-21513
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' o
Media
CVE-2024-3636
Pinpoint Booking System <= 2.9.9.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Crítica
CVE-2024-6457
HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection
Media
CVE-2024-6270
Community Events <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2024-1937
Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification
Media
CVE-2024-3587
Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios'
Media
CVE-2024-6621
WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update
Media
CVE-2024-2232
Himer - Social Questions and Answers <= 2.1.2 - Cross-Site Request Forgery to Arbitrary User Invites
Media
CVE-2024-6570
Glossary <= 2.2.26 - Unauthenticated Full Path Disclosure
Media
CVE-2024-6498
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-5852
WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal
Media
CVE-2024-38767
BSK PDF Manager <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-6710
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.44 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-6720
Light Poll <= 1.0.0 - Cross-Site Request Forgery to Poll Answers Deletion
Media
CVE-2024-5081
Wp EMember < 10.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.