Media
CVE-2023-46495
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.540
Media
CVE-2023-46494
Cross Site Scripting in evershop
Media
CVE-2023-46493
Directory Traversal in evershop
Baja
ghsa-j4g3-3q8x-jxqp
dbt-core's secret env vars written to package-lock.json in plaintext
Media
CVE-2023-49487
Cross-site Scripting in JFinalCMS
Media
CVE-2023-49485
Cross-site Scripting in JFinalCMS
Media
CVE-2023-49486
Cross-site Scripting in JFinalCMS
Alta
ghsa-9j5w-2cqc-cwj9
Magento LTS vulnerable to Stored XSS via TinyMCE WYSIWYG Editor
Alta
CVE-2023-26158
mockjs vulnerable to Prototype Pollution via the Util.extend function
Alta
CVE-2023-48122
Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method
Baja
CVE-2023-6599
Microweber missing standardized error handling mechanism
Media
CVE-2023-6583
Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality
Media
a7cf1c70-9778-4b50-b494-d0b1d0277b35
EmbedPress <= 3.9.4 - Missing Authorization
Media
CVE-2023-6120
Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal
Media
CVE-2023-5756
Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action
Media
CVE-2023-6485
Html5 Video Player <= 2.5.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2023-6496
Manage Notification E-mails <= 1.8.5 - Missing Authorization
Media
CVE-2023-47440
Directory Traversal in Gladys Assistant
Crítica
CVE-2023-50164
Apache Struts vulnerable to path traversal
Media
CVE-2023-6568
A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malici
Media
CVE-2023-6566
Microweber Business Logic Errors
Media
CVE-2023-49855
BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter <= 1.49.3 - Cross-Site Request Forgery
Media
CVE-2023-40003
WP Project Manager <= 2.6.7 - Missing Authorization
Crítica
CVE-2023-6271
Backup Migration <= 1.3.5 - Unauthenticated Sensitive Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.