Media
CVE-2025-31677
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.070
Restablecer filtros
Media
CVE-2025-31678
drupal/ai - SA-CONTRIB-2025-004
Media
CVE-2025-31128
drupal/gifplayer - SA-CONTRIB-2025-032
Media
CVE-2025-2967
ConcreteCMS Cross-Site Scripting (XSS) via HTML Block Text Field
Media
CVE-2025-28094
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)
Media
CVE-2025-28093
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings
Media
CVE-2025-28092
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload
Media
CVE-2025-30741
Pixelfed may allow unauthorized actor to view private posts and private users
Media
CVE-2025-23204
API Platform Core does not call GraphQl securityAfterResolver
Media
CVE-2025-2689
yiisoft Yii2 Deserialization of Untrusted Data
Baja
CVE-2025-31675
Drupal core - SA-CORE-2025-004
Media
CVE-2025-30152
Sylius PayPal Plugin has an Order Manipulation Vulnerability after PayPal Checkout
Media
CVE-2025-30081
Clickstorm SEO Allows Cross-Site Scripting (XSS)
Media
CVE-2025-30083
Additional TCA Allows Cross-Site Scripting (XSS)
Media
CVE-2025-29790
Contao Vulnerable to Cross-Site Scripting (XSS) through SVG uploads
Alta
CVE-2024-44313
TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function
Media
CVE-2024-44314
TastyIgniter Has an Incorrect Access Control Vulnerability
Media
CVE-2025-29788
Sylius PayPal Plugin Payment Amount Manipulation Vulnerability
Baja
CVE-2025-28010
MODX allows cross-site scripting (XSS) via an SVG file
Media
CVE-2025-27794
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
Media
ghsa-3wgq-h4fr-cwg5
laravel-crud-wizard-free has File Validation Bypass
Baja
CVE-2025-2214
Microweber vulnerable to XSS attack due to insure `group` component in its Settings handler
Media
CVE-2025-27617
Pimcore Vulnerable to SQL Injection in getRelationFilterCondition
Media
CVE-2025-48958
Froxlor has an HTML Injection Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.