Alta
CVE-2025-68456
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 88
Restablecer filtros
Alta
CVE-2025-69200
phpMyFAQ has unauthenticated config backup download via /api/setup/backup
Alta
CVE-2025-66295
Grav vulnerable to Path traversal / arbitrary YAML write via user creation leading to Account Takeover / System Corruption
Media
CVE-2025-66302
Grav vulnerable to Path Traversal allowing server files backup
Media
CVE-2025-66303
Grav is vulnerable to a DOS on the admin panel
Media
CVE-2025-54417
Craft CMS has a theoretical bypass for CVE-2025-23209
Media
CVE-2025-34076
Microweber CMS API has authenticated local file inclusion vulnerability
Alta
CVE-2025-48201
The Backup Plus extension for TYPO3 (ns_backup) has a Predictable Resource Location
Baja
CVE-2025-48206
The Backup Plus extension for TYPO3 (ns_backup) allows XSS
Media
CVE-2025-48204
The Backup Plus extension for TYPO3 (ns_backup) allows command injections
Crítica
CVE-2025-46348
YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download
Media
CVE-2024-33298
Microweber Cross-site Scripting vulnerability
Baja
CVE-2024-43437
Moodle Cross-site Scripting vulnerability
Media
CVE-2024-43440
Moodle LFI vulnerability when restoring malformed block backups
Media
CVE-2024-46212
Path traversal in redaxo
Media
CVE-2024-41373
ICEcoder Path Traversal vulnerability
Alta
CVE-2024-21519
Arbitrary File Creation in opencart
Alta
ghsa-hh95-5xm5-v8v7
TYPO3 CMS Possible Insecure Deserialization in Extbase Request Handling
Alta
ghsa-5h5v-m596-r6rf
TYPO3 Possible Insecure Deserialization in Extbase Request Handling
Media
ghsa-7wh8-jrq7-p27f
SimpleSAMLphp exposes credentials in session storage
Alta
CVE-2024-27921
Grav File Upload Path Traversal
Media
CVE-2023-3469
phpMyFAQ Cross-site Scripting
Media
CVE-2023-28330
Moodle arbitrary file read vulnerability
Crítica
CVE-2022-40314
Moodle remote code execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.