Media
CVE-2025-47939
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.221
Restablecer filtros
Baja
CVE-2025-47936
TYPO3 CMS Webhooks Server Side Request Forgery
Media
CVE-2025-30159
Kirby vulnerable to path traversal of snippet names in the `snippet()` helper
Baja
CVE-2025-30207
Kirby vulnerable to path traversal in the router for PHP's built-in server
Media
CVE-2025-31493
Kirby vulnerable to path traversal of collection names during file system lookup
Media
Explotada en ataques
CVE-2025-35939
Craft CMS stores arbitrary content provided by unauthenticated users in session files
Alta
CVE-2025-46347
YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution
Crítica
CVE-2025-46348
YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download
Sin evaluar
CVE-2025-3734
drupal/stage_file_proxy - SA-CONTRIB-2025-035
Media
CVE-2025-30148
Silverstripe Framework has a XSS vulnerability in HTML editor
Alta
ghsa-cj3w-g42v-wcj6
ibexa/fieldtype-richtext allows access to external entities in XML
Alta
ghsa-2jqj-5qv2-xvcg
ezsystems/ezplatform-richtext allows access to external entities in XML
Crítica
CVE-2025-22871
RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency
Baja
CVE-2025-30166
Pimcore's Admin Classic Bundle allows HTML Injection
Alta
CVE-2025-3192
Browsershot Server-Side Request Forgery (SSRF) via setURL() Function
Alta
CVE-2025-31131
Yeswiki Path Traversal vulnerability allows arbitrary read of files
Alta
CVE-2025-31691
drupal/oauth2_server - SA-CONTRIB-2025-020
Media
CVE-2025-28094
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)
Media
CVE-2025-28093
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings
Media
CVE-2025-28092
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload
Media
CVE-2025-30741
Pixelfed may allow unauthorized actor to view private posts and private users
Media
CVE-2025-27794
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
Media
CVE-2025-48958
Froxlor has an HTML Injection Vulnerability
Media
CVE-2025-71418
PocketMine-MP allows malicious client data to waste server resources due to lack of limits for explode()
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.