Crítica
CVE-2024-29868
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2024-27136
Cross site scripting in Apache JSPWiki
Media
CVE-2024-6075
WP eStore <= 8.5.4 - Cross-Site Request Forgery to Coupon Deletion
Media
CVE-2024-6073
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Discount Editing
Media
CVE-2024-6307
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API
Alta
CVE-2024-5630
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Arbitrary File Upload
Media
CVE-2024-6072
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via REQUEST_URI
Media
CVE-2024-6074
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Customer Editing
Media
CVE-2024-3249
Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification
Media
CVE-2024-6076
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Category Editing
Media
CVE-2024-6289
WPS Hide Login <= 1.9.16.3 - Login Page Disclosure
Media
CVE-2024-32111
WordPress Core < 6.5.5 - Authenticated (Contributor+) Directory Traversal
Media
CVE-2024-31111
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Template Part Block
Crítica
CVE-2024-5443
Remote Code Execution via path traversal bypass in lollms
Alta
CVE-2024-21518
Zip slip in opencart
Alta
CVE-2024-21519
Arbitrary File Creation in opencart
Media
CVE-2024-21515
Cross site scripting in opencart
Media
CVE-2024-21516
Cross site scripting in opencart
Media
CVE-2024-21517
Cross site scripting in opencart
Alta
CVE-2024-21514
SQL injection in opencart
Media
CVE-2024-5284
WP Affiliate Platform < 6.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2024-5715
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via Member Edit
Media
CVE-2024-3963
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers <= 1.12.13 - Authenticated (Editor+) Stored Cross-Site Scripting
Media
CVE-2024-4272
Support SVG <= 1.0.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.