Media
CVE-2025-51488
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.069
Restablecer filtros
Media
CVE-2025-51487
moonshine Stored Cross-Site Scripting Vulnerability in Create Article
Media
CVE-2025-51510
MoonShine SQL Injection Vulnerability
Media
CVE-2025-51489
MoonShine Arbitrary File Upload Vulnerability
Media
CVE-2025-55296
LibreNMS allows stored XSS in Alert Template name field
Sin evaluar
CVE-2025-8996
drupal/layout_builder_perms - SA-CONTRIB-2025-097
Sin evaluar
CVE-2025-8995
drupal/alogin - SA-CONTRIB-2025-096
Alta
CVE-2025-52392
Soosyze CMS's /user/login endpoint missing rate-limiting and lockout mechanisms
Media
CVE-2025-55166
svg-sanitizer Bypasses Attribute Sanitization
Alta
CVE-2025-49555
Magento Cross-Site Request Forgery (CSRF) vulnerability
Media
CVE-2025-49558
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
Alta
CVE-2025-49554
Magento vulnerable to denial of service
Media
CVE-2025-49559
Magento vulnerable to path traversal
Alta
CVE-2025-49556
Magento has incorrect authorization issue that leads to arbitrary file system read
Alta
CVE-2025-49557
Magento Cross-site Scripting vulnerability
Media
CVE-2025-54417
Craft CMS has a theoretical bypass for CVE-2025-23209
Sin evaluar
CVE-2025-8675
drupal/ai_seo_link_advisor - SA-CONTRIB-2025-095
Media
CVE-2025-7954
Shopware race condition bypasses voucher restrictions
Baja
CVE-2025-8573
Concrete CMS is vulnerable to Stored XSS from Home Folder on Members Dashboard page
Media
CVE-2025-8571
Concrete CMS vulnerable to Reflected Cross-Site Scripting (XSS) in Conversation Messages Dashboard Page
Crítica
CVE-2025-50706
ThinkPHP Path Traversal Vulnerability
Media
CVE-2025-54869
FPDI allows Memory Exhaustion (OOM) in PDF Parser which leads to Denial of Service
Crítica
CVE-2025-54119
The ADOdb sqlite3 driver allows SQL injection
Media
CVE-2025-51504
Microweber XSS Vulnerability in the homepage Endpoint
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.