Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 524
Restablecer filtrosKubernetes C# client accepts certificates from any CA without properly verifying the trust chain
ImageMagick BlobStream Forward-Seek Under-Allocation
FormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution
ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash
ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
imagemagick: integer overflows in MNG magnification
imagemagick: heap-buffer overflow read in MNG magnification with alpha
ImageMagick has a heap-buffer-overflow
ImageMagick has a Memory Leak in magick stream
ImageMagick has a Heap Buffer Overflow in InterpretImageFilename
ImageMagick has a Stack Buffer Overflow in image.c
SixLabors ImageSharp Has Infinite Loop in GIF Decoder When Skipping Malformed Comment Extension Blocks
Umbraco Delivery API allows for cached requests to be returned with an invalid API key
ImageMagick has XMP profile write that triggers hang due to unbounded loop
SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite
Umbraco CMS disclosure of configured password requirements
DotVVM allows path traversal when deployed in Debug mode
Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability
Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads
DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline
Microsoft.Build.Tasks.Core .NET Spoofing Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.