Alta
CVE-2025-58449
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.221
Restablecer filtros
Media
CVE-2025-9823
Mautic vulnerable to reflected XSS in lead:addLeadTags - Quick Add
Baja
CVE-2025-9821
Mautic vulnerable to SSRF via webhook function
Alta
CVE-2025-71417
PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking
Crítica
CVE-2025-52122
The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability
Alta
CVE-2025-52353
Badaso CMS file upload vulnerability
Alta
CVE-2025-43960
Adminer PHP Object Injection issue leads to Denial of Service
Alta
CVE-2025-54370
PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser
Baja
CVE-2025-55745
UnoPim has CSV Injection on Quick Export feature
Alta
CVE-2025-55743
UnoPim vulnerable to remote code execution through Arbitrary File upload
Media
CVE-2025-8678
WP Crontrol - 1.17.0 - 1.19.1 - Authenticated (Administrator+) Blind Server-Side Request Forgery
Sin evaluar
CVE-2025-8675
drupal/ai_seo_link_advisor - SA-CONTRIB-2025-095
Media
CVE-2025-54869
FPDI allows Memory Exhaustion (OOM) in PDF Parser which leads to Denial of Service
Media
CVE-2025-7899
Powermail extension for TYPO3 allows Insecure Direct Object Reference
Media
CVE-2025-54139
HAX CMS application pages vulnerable to clickjacking
Alta
ghsa-49xw-hw94-fmv2
Dolibarr has Remote Code Execution Vulnerability (Bypass)
Crítica
CVE-2025-53833
LaRecipe is vulnerable to Server-Side Template Injection attacks
Media
CVE-2025-34076
Microweber CMS API has authenticated local file inclusion vulnerability
Alta
CVE-2025-44163
raspap-webgui has a Directory Traversal vulnerability
Crítica
CVE-2025-49132
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
Media
CVE-2025-49138
HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter
Alta
CVE-2025-49137
Hax CMS Stored Cross-Site Scripting vulnerability
Alta
CVE-2025-48882
PHPOffice Math allows XXE when processing an XML file in the MathML format
Media
CVE-2024-47056
Mautic does not shield .env files from web traffic
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.