Media
CVE-2024-32689
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Media
CVE-2024-32683
Wp Ultimate Review <= 2.2.5 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2024-32686
Backup Migration <= 1.4.3 - Information Exposure via Log Files
Media
CVE-2024-1429
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget
Media
CVE-2024-3811
Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Crítica
CVE-2024-32680
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.5.2 - Authenticated (Subscriber+) Remote Code Execution
Media
CVE-2024-32676
LoginPress Pro < 3.0 - Captcha Bypass
Media
CVE-2024-32688
MyRewards <= 5.3.0 - Missing Authorization
Media
CVE-2024-32678
TrackShip for WooCommerce <= 1.7.5 - Missing Authorization
Media
CVE-2024-1426
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price List Widget
Media
CVE-2023-6897
EAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode
Media
CVE-2024-32684
Wp Ultimate Review <= 2.2.5 - Missing Authorization
Media
CVE-2024-32677
LoginPress Pro < 3.0 - Missing Authorization to License Status Update
Baja
CVE-2024-27086
MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service
Crítica
CVE-2024-3660
Keras code injection vulnerability
Alta
CVE-2024-22262
Spring Framework URL Parsing with Host Validation
Crítica
CVE-2024-3271
llama-index-core Command Injection vulnerability
Media
CVE-2024-3575
Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb
Crítica
CVE-2024-3573
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_loc
Alta
CVE-2024-1560
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1594
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1593
mlflow vulnerable to Path Traversal
Alta
CVE-2024-1558
mlflow vulnerable to Path Traversal
Crítica
CVE-2024-2912
Insecure deserialization in BentoML
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.