Media
CVE-2023-1918
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2023-1921
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_start_cdn_integration_ajax_request_callback'
Media
CVE-2023-24418
Tiny carousel horizontal slider plus <= 3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-1925
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'
Media
CVE-2023-1919
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'
Media
CVE-2023-29422
Dynamics 365 Integration <= 1.3.13 - Missing Authorization via init
Crítica
CVE-2023-27033
Unrestricted Upload of File with Dangerous Type in Cdesigner module for PrestaShop
Media
CVE-2023-0842
xml2js is vulnerable to prototype pollution
Alta
CVE-2023-1887
thorsten/phpmyfaq vulnerable to business logic errors
Media
CVE-2023-1788
Firefly III insufficiently expires sessions
Alta
CVE-2023-1886
thorsten/phpmyfaq vulnerable to authentication bypass
Media
CVE-2023-1885
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via category field name parameter
Media
CVE-2023-1884
thorsten/phpmyfaq vulnerable to cross-site scripting (XSS) via stopword parameter
Media
CVE-2023-1883
thorsten/phpmyfaq vulnerable to improper access control
Alta
CVE-2023-1882
thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameter
Alta
CVE-2023-1881
Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header
Alta
CVE-2023-1880
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter
Media
CVE-2023-1879
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via updatecategory parameter
Alta
CVE-2023-1878
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via adminlog
Media
CVE-2023-1877
Microweber vulnerable to command injection
Alta
CVE-2023-1758
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter
Alta
CVE-2023-1757
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter
Media
CVE-2023-1756
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via HTML export
Crítica
CVE-2023-25330
MyBatis-Plus vulnerable to SQL injection via TenantPlugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.