Media
d7d08bfd-9861-4e21-a696-25b00233ad94
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-4757
Staff / Employee Business Directory for Active Directory <= 1.2.1 - Insufficient Escaping of Stored LDAP Values
Media
CVE-2023-4838
Simple Download Counter <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-41952
Contact Form for Plugin by Fluent Forms <= 5.0.8 - Insecure Direct Object Reference
Media
CVE-2023-41050
Information disclosure in AccessControl
Alta
CVE-2023-4536
My Account Page Editor <= 1.3.1 - Authenticated (Subscriber+) Arbitrary File Upload
Media
ee595f48-b72f-4569-a248-7dbd0b9152ae
Easy Form by AYS <= 1.3.8 - Cross-Site Request Forgery
Crítica
CVE-2023-4666
Form Maker by 10Web <= 1.15.19 - Unauthenticated Arbitrary File Upload
Media
CVE-2023-51375
EmbedPress <= 3.8.3 - Cross-Site Request Forgery
Media
CVE-2023-39676
XSS in FieldPopupNewsletter Prestashop Module
Media
CVE-2023-39677
PHPInfo Exposure in MyPrestaModules SimpleImportProduct and UpdateProducts Modules
Crítica
CVE-2023-39675
Improper neutralization of a SQL parameter in simpleimportproduct from MyPrestaModules module for PrestaShop
Media
CVE-2023-41327
WireMock Controlled Server Side Request Forgery vulnerability through URL
Media
CVE-2023-39956
Electron vulnerable to out-of-package code execution when launched with arbitrary cwd
Media
CVE-2023-29198
Electron context isolation bypass via nested unserializable return value
Alta
CVE-2023-23623
Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled
Sin evaluar
drupal-contrib-2023-044
drupal/webprofiler - SA-CONTRIB-2023-044
Media
CVE-2023-39265
Apache Superset Improper Input Validation vulnerability
Media
CVE-2023-37941
Apache Superset Deserialization of Untrusted Data vulnerability
Media
CVE-2023-32672
Apache Superset has incorrect authorization check
Crítica
CVE-2021-36021
Magento affected by remote code execution vulnerability in the CMS page scheduled update feature
Crítica
CVE-2021-36036
Magento improper access control vulnerability within Magento's Media Gallery Upload workflow
Crítica
CVE-2021-36023
Magento XML Injection vulnerability in the Widgets Update Layout
Media
CVE-2023-27523
Apache Superset vulnerable to improper data authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.