Crítica
CVE-2023-26472
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Crítica
CVE-2023-26474
XWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author
Alta
CVE-2023-26476
XWiki Platform packages Expose Sensitive Information to an Unauthorized Actor
Media
CVE-2023-26473
Unprivileged XWiki Platform users can make arbitrary select queries using DatabaseListProperty and suggest.vm
Media
CVE-2023-23927
Craft CMS Stored Cross-site Scripting Injection Vulnerability
Media
CVE-2023-26488
OpenZeppelin Contracts contains Incorrect Calculation
Alta
CVE-2023-27560
phpseclib Infinite Loop vulnerability
Media
CVE-2023-1160
Cockpit Uses Platform-Dependent Third Party Components
Alta
CVE-2022-40700
CSSTidy - Server-Side Request Forgery
Media
CVE-2023-0772
OptinMonster <= 2.12.1 - Authenticated (Subscriber+) Sensitive Information Disclosure via Shortcode
Media
CVE-2023-27436
Elegant Custom Fonts <= 1.0 - Cross-Site Request Forgery
Media
CVE-2023-27439
New Adman <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-27434
Classic Editor and Classic Widgets <= 1.2.5 - Cross-Site Request Forgery via render_settings_page
Media
CVE-2023-27441
New Adman <= 1.6.8 - Cross-Site Request Forgery via plugin_menu
Media
CVE-2022-40699
Yet Another Stars Rating <= 3.1.2 - Authenticated (Subscriber+) Cross-Site Scripting via Shortcodes
Media
CVE-2023-27438
WP Translitera <= p1.2.5 - Cross-Site Request Forgery
Media
CVE-2023-27442
Leyka <= 3.29.2 - Cross-Site Request Forgery
Media
CVE-2023-25451
CPO Content Types <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2023-27432
Manage Upload Limit <= 1.0.4 - Reflected Cross-Site Scripting via upload_limit
Media
CVE-2023-25034
WP Clean Up <= 1.2.3 - Cross-Site Request Forgery via wp_clean_up_optimize
Media
CVE-2023-25021
FareHarbor for WordPress <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Baja
CVE-2023-0219
FluentSMTP <= 2.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Email Logs
Media
CVE-2023-0844
Namaste! LMS <= 2.5.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'accept_other_payment_methods', 'other_payment_methods' Parameters
Media
CVE-2023-27449
Total Poll Lite <= 4.8.6 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.