Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.125
Restablecer filtrosABP Account Module has an Open Redirect through Improper validation in its register function
ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only)
Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
Csla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)
DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload
DNN CKEditor Provider allows unauthenticated upload out-of-the-box
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
Piranha CMS vulnerable to stored cross-site scripting (XSS)
Mammoth is vulnerable to Directory Traversal
Smidge is vulnerable to Path Traversal
Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability
Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability
Amazon.IonDotnet is vulnerable to Denial of Service attacks
Akka.Remote TLS did not properly implement certificate-based authentication
FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint
PiranhaCMS stored XSS
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
DNN Vulnerable to Stored XSS Using Backend Admin Credentials
DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.