Crítica
CVE-2024-2804
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2024-1637
360 Javascript Viewer <= 1.7.12 - Missing Authorization to Plugin Settings Update
Media
ghsa-9j39-4686-m3c4
Ibexa Kernel's files with blacklisted extensions can be still saved to drafts
Media
ghsa-mwvh-p3hx-x4gg
Ibexa Kernel's files with blacklisted extensions can be still saved to drafts
Baja
CVE-2024-28868
Umbraco possible user enumeration
Baja
ghsa-cq96-9974-v8hm
Dynamic Variable Evaluation in qiskit-ibm-runtime
Media
CVE-2024-22258
Improper Authentication in Spring Authorization Server
Crítica
CVE-2024-28179
Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server
Media
CVE-2024-23821
GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2024-23819
GeoServer's MapML HTML Page vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2024-23818
GeoServer's WMS OpenLayers Format vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2024-23643
GeoServer's GWC Seed Form vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2024-23642
GeoServer's Simple SVG Renderer vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2024-23640
GeoServer's Style Publisher vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2024-23634
GeoServer Arbitrary file renaming vulnerability in REST Coverage/Data Store API
Media
CVE-2023-51445
Stored Cross-Site Scripting (XSS) vulnerability in GeoServer's REST Resources API
Alta
CVE-2023-51444
Arbitrary file upload vulnerability in GeoServer's REST Coverage Store API
Alta
CVE-2023-41877
GeoServer log file path traversal vulnerability
Media
CVE-2024-2311
Avada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2024-2341
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2022-4965
Invitation Code Content Restriction Plugin from CreativeMinds <= 1.5.4 - Reflected Cross-Site Scripting
Alta
CVE-2024-2344
Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entry
Media
CVE-2024-2428
The Ultimate Video Player For WordPress <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-29127
Advanced Access Manager <= 6.9.20 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.