Crítica
ghsa-jf8c-36vw-98x4
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.540
Crítica
ghsa-jjx7-8462-w4m4
Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution
Media
ghsa-58xv-7h9r-mx3c
Drupal Malicious file upload with filenames stating with dot
Media
ghsa-x6v2-xmrq-574j
Drupal Anonymous Open Redirect
Media
ghsa-86xw-vmcx-9mj4
Drupal Content moderation Access bypass
Media
ghsa-r67r-42wx-c8r7
Drupal External URL injection through URL aliases leading to Open Redirect
Media
ghsa-vfgc-c76h-mwh4
Drupal core Cross-Site Scripting (XSS) vulnerabilities
Alta
ghsa-gxxj-g9v8-w28p
Drupal core Arbitrary PHP code execution
Media
ghsa-6gf6-24h2-66j4
Drupal core Open Redirect vulnerability
Media
ghsa-v273-j5hq-26xp
Drupal core uses a vulnerable Third-party library CKEditor
Alta
ghsa-98h9-727m-44qv
Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar
Media
ghsa-mh4h-27gq-cxwj
Drupal core Access bypass
Media
ghsa-7gwj-7fhm-vw4w
Drupal core unrestricted file upload
Media
ghsa-pr99-c33p-fwf6
Drupal core Denial of Service
Crítica
ghsa-7v68-3pr5-h3cr
Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution
Media
CVE-2024-4391
Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
Crítica
ghsa-6mgp-v5cm-ghg5
Drupal core Remote Code Execution
Media
ghsa-gfvf-2f25-f34r
Drupal Anonymous Open Redirect
Media
ghsa-7f4f-p7mq-p4fv
Drupal External URL injection through URL aliases leading to Open Redirect
Media
ghsa-f84q-mgj9-8jfc
Drupal Content moderation Access bypass
Alta
ghsa-vjrg-wpm8-rhrw
doctrine/orm Regression in Query Parenthesis can have Security Implications
Crítica
ghsa-6q9v-4hq6-5m67
Doctrine SQL injection vulnerability
Media
CVE-2024-4478
Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget
Media
CVE-2024-4546
Custom Post Type Attachment <= 3.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pdf_attachment Shortcode
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.