Alta
CVE-2023-4821
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-5237
Memberlite Shortcodes <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2023-4819
Shared Files <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting
Crítica
CVE-2023-39640
Improper neutralization of SQL parameter in Cookie Law - Banner + Cookie blocker module for PrestaShop
Alta
CVE-2023-41890
Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation
Alta
CVE-2023-43496
Jenkins temporary plugin file created with insecure permissions
Media
CVE-2023-43494
Jenkins does not exclude sensitive build variables from search
Baja
CVE-2023-43498
Jenkins temporary uploaded file created with insecure permissions
Media
CVE-2023-43502
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Media
CVE-2023-43500
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Baja
CVE-2023-43497
Jenkins temporary uploaded file created with insecure permissions
Media
CVE-2023-43501
Jenkins Build Failure Analyzer Plugin missing permission check
Alta
CVE-2023-43495
Jenkins Cross-site Scripting vulnerability
Alta
CVE-2023-43499
Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability
Crítica
CVE-2023-5256
Drupal core - SA-CORE-2023-006
Crítica
CVE-2019-19450
ReportLab vulnerable to remote code execution via paraparser
Baja
CVE-2023-34047
Spring for GraphQL may be exposed to GraphQL context with values from a different session
Alta
CVE-2023-4853
Quarkus HTTP vulnerable to incorrect evaluation of permissions
Media
CVE-2023-26144
graphql Uncontrolled Resource Consumption vulnerability
Sin evaluar
pysec-2023-175
Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.
Sin evaluar
pysec-2023-174
imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). imagecodecs v2023.9.18 upgrades the bundled libwebp binary to
Alta
CVE-2023-38887
File Upload vulnerability in Dolibarr ERP CRM
Alta
CVE-2023-38886
Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script
Crítica
CVE-2023-38888
Cross Site Scripting vulnerability in Dolibarr ERP CRM
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.