Media
CVE-2023-27423
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2023-1335
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'ucss_connect'
Media
CVE-2023-1341
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'ajax_deactivate'
Media
CVE-2023-1345
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'queue_posts'
Media
ce060989-ce70-49ac-921c-a687bc944090
Mass Delete Taxonomies <= 3.0.0 - Cross-Site Request Forgery via mp_plugin_mass_delete_tags_init
Media
CVE-2022-40211
GiveWP <= 2.25.1 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2023-1336
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'ajax_deactivate'
Media
CVE-2023-1346
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_page_cache'
Crítica
aefbebce-9433-455d-b27c-93088b0c8494
LeadSnap <= 1.23 - Unauthenticated PHP Object Injection via AJAX
Media
CVE-2023-27430
Mass Delete Unused Tags <= 2.0.0 - Cross-Site Request Forgery via plugin_mass_delete_unused_tags_init
Media
CVE-2023-23672
GiveWP <= 2.25.1 - Authenticated (Contributor+) Arbitrary Content Deletion
Media
CVE-2023-1337
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_uucss_logs'
Media
CVE-2023-1342
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'ucss_connect'
Media
CVE-2023-1340
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_uucss_logs'
Media
CVE-2023-1333
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_page_cache'
Media
CVE-2023-1344
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'uucss_update_rule'
Media
CVE-2023-1338
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'attach_rule'
Media
CVE-2023-1339
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'uucss_update_rule'
Media
CVE-2023-1343
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'attach_rule'
Media
CVE-2023-1286
Cross-site Scripting (XSS) in pimcore/pimcore
Crítica
CVE-2023-26110
node-bluetooth is vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation
Crítica
CVE-2023-26109
node-bluetooth-serial-port is vulnerable to Buffer Overflow via the findSerialPortChannel
Crítica
CVE-2023-1283
builderio/qwik is vulnerable to code injection
Crítica
CVE-2023-24777
SQL Injection in Funadmin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.