Media
CVE-2023-29197
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Crítica
CVE-2023-28787
Quiz and Survey Master <= 8.1.4 - Unauthenticated SQL Injection
Media
2b2302d9-426c-415b-a7d3-3a9de95d87d1
WPML <= 4.6.0 - Reflected Cross-Site Scripting via wp_lang
Alta
CVE-2021-34337
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrar
Media
CVE-2023-2102
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
Media
CVE-2023-2105
alextselegidis/easyappointments Session Fixation vulnerability
Media
CVE-2023-2104
alextselegidis/easyappointments Improper Access Control vulnerability
Media
CVE-2023-2103
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
Alta
CVE-2023-30535
Snowflake JDBC vulnerable to command injection via SSO URL authentication
Media
CVE-2023-29529
matrix-js-sdk vulnerable to invisible eavesdropping in group calls
Crítica
CVE-2023-2034
froxlor/froxlor vulnerable to unrestricted upload of file with dangerous type
Media
CVE-2023-27425
Electric Studio Client Login <= 0.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-47177
WP EasyPay <= 4.0.4 - Cross-Site Request Forgery
Media
CVE-2023-23725
Shortcodes by Angie Makes <= 3.46 - Missing Authorization
Media
CVE-2023-30748
Easy Appointments <= 3.11.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Crítica
CVE-2023-2027
ZM Ajax Login & Register <= 2.0.2 - Authentication Bypass
Media
CVE-2023-27606
WP Reroute Email <= 1.4.6 - Cross-Site Request Forgery
Media
CVE-2023-22696
Affiliate Links Lite <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-27614
Motor Racing League <= 1.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-45367
Custom Order Numbers for WooCommerce <= 1.4.0 - Cross-Site Request Forgery
Media
CVE-2023-30498
Vimeotheque <= 2.2.1 - Reflected Cross-Site Scripting via 'view' and 'page'
Media
CVE-2023-30751
Article Directory Redux <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-27609
WP Roles at Registration <= 0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2023-28535
Paytm Payment Donation <= 2.2.0 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.