Alta
CVE-2025-62617
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.068
Restablecer filtros
Media
CVE-2025-61457
code16 Sharp vulnerable to Cross Site Scripting (XSS)
Media
CVE-2025-60790
ProcessWire CMS vulnerable to resource-exhaustion Denial of Service
Media
ghsa-r2vg-hvjm-fg38
Shopware Customer Orders can be canceled, even if refunds are disabled
Media
ghsa-27c9-vp3w-6ww8
Shopware exposes sensitive user information via CSV export mapping
Baja
ghsa-3cpp-fv95-mpr5
Shopware vulnerable to Server-Side Request Forgery (SSRF) – order invoice
Baja
ghsa-6wh5-mw9h-5c3w
Shopware vulnerable to path traversal via Plugin upload
Media
ghsa-m895-2hj3-8cg9
Shopware vulnerable to MediaVisibilityRestrictionSubscriber bypass when reading media entities by aggregating fields individually
Media
CVE-2025-62508
Citizen vulnerable to stored XSS in sticky header button messages
Baja
CVE-2025-61417
TastyIgniter vulnerable to Cross-Site Scripting
Media
CVE-2025-62671
Cargo Mediawiki Extension vulnerable to Cross-site Scripting
Media
ghsa-8c2g-f8jm-5cr7
ibexa/fieldtype-richtext has an XSS vulnerability via acronym custom tag in Rich Text
Media
ghsa-2mx6-fq24-g2mh
ibexa/admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal
Media
ghsa-99c7-c3mw-mxhv
ezsystems/ezplatform-admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal
Media
ghsa-q3x8-6898-23g3
ibexa/user login enumerates user accounts
Media
CVE-2025-62414
bagisto has Cross Site Scripting (XSS) in Create New Customer
Crítica
CVE-2025-62417
bagisto has CSV Formula Injection in Create New Product
Media
CVE-2025-62418
bagisto has a Cross Site Scripting (XSS) vulnerability in TinyMCE Image Upload (SVG)
Media
CVE-2025-62416
bagisto has Server Side Template Injection (SSTI) in Product Description
Baja
CVE-2025-62412
LibreNMS alert-rules has a Cross-Site Scripting Vulnerability
Baja
CVE-2025-61924
PrestaShop Checkout Target PayPal merchant account hijacking from backoffice
Media
CVE-2025-61923
PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
Media
CVE-2025-62415
bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)
Media
CVE-2025-62411
LibreNMS has a Stored XSS vulnerability in its Alert Transport name field
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.