Alta
CVE-2023-6730
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.538
Crítica
CVE-2019-25158
Pedroetb TTS-API OS Command Injection
Media
CVE-2023-46104
Apache Superset uncontrolled resource consumption
Alta
CVE-2023-49734
Apache Superset incorrect write permissions vulnerability
Media
CVE-2023-49736
Apache Superset SQL injection vulnerability
Media
CVE-2023-49006
Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability
Alta
CVE-2023-6940
mlflow Command Injection vulnerability
Media
CVE-2014-125107
Corveda PHPSandbox Protection Mechanism Failure vulnerability
Media
CVE-2023-50829
Loan Repayment Calculator and Application Form <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-47527
WP Edit Username <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Media
CVE-2023-50835
Advanced Category Template <= 0.1 - Cross-Site Request Forgery
Media
CVE-2023-50377
Simple Counter <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Media
CVE-2023-50823
CSS & JavaScript Toolbox <= 11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2023-7198
WP Dashboard Notes <= 1.0.10 - Insecure Direct Object References to Authenticated Private Note Deletion
Media
CVE-2023-50832
Multi Step Form <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-50825
iframe Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2023-47525
Event Management Tickets Booking <= 1.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Media
CVE-2023-50831
CURCY – Multi Currency for WooCommerce <= 2.2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-50830
Seos Contact Form <= 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-50833
Colibri Page Builder <= 1.0.240 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-50822
Currency Converter Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2023-50827
Accredible Certificates & Open Badges <= 1.4.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Media
CVE-2023-50376
Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting
Media
CVE-2023-50834
WooCommerce Menu Extension <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.