Alta
CVE-2025-46349
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.407
Restablecer filtros
Baja
CVE-2025-46350
Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting
Media
CVE-2025-46550
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Media
CVE-2025-46549
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Media
CVE-2025-3645
Moodle has an IDOR in messaging web service which allows access to some user details
Media
CVE-2025-3640
Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users
Alta
CVE-2025-3642
Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
Alta
CVE-2025-3641
Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
Baja
CVE-2025-3635
Moodle has a CSRF risk in user tours manager that allows tour duplication
Media
CVE-2025-3627
Moodle makes some user data available before completing second factor with MFA enabled
Media
CVE-2025-32045
Moodle shows hidden grades to users without permission on some grade reports
Alta
CVE-2025-32044
Moodle allows unauthenticated REST API user data exposure
Media
CVE-2025-3634
Moodle self enrollment available before completing second factor with MFA enabled
Crítica
Explotada en ataques
CVE-2025-32432
Craft CMS Allows Remote Code Execution
Sin evaluar
CVE-2025-3907
drupal/search_api_solr - SA-CONTRIB-2025-046
Sin evaluar
CVE-2025-3903
drupal/ueditor - SA-CONTRIB-2025-044
Sin evaluar
CVE-2025-3900
drupal/colorbox - SA-CONTRIB-2025-041
Sin evaluar
CVE-2025-3739
drupal/d8_google_optimize_hide_page - SA-CONTRIB-2025-040
Sin evaluar
CVE-2025-3738
drupal/google_optimize - SA-CONTRIB-2025-039
Sin evaluar
CVE-2025-3737
drupal/gmap_store_locator - SA-CONTRIB-2025-038
Sin evaluar
CVE-2025-3736
drupal/simple_gtm - SA-CONTRIB-2025-037
Sin evaluar
CVE-2025-3735
drupal/panelizer - SA-CONTRIB-2025-036
Sin evaluar
CVE-2025-3734
drupal/stage_file_proxy - SA-CONTRIB-2025-035
Media
CVE-2025-32426
Formie has XSS vulnerability for email notification content for preview
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.