Media
CVE-2025-68437
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 127
Restablecer filtros
Media
CVE-2025-68436
Craft CMS vulnerable to potential information disclosure via unchecked asset relocation
Media
CVE-2025-57811
Craft CMS Potential Remote Code Execution via Twig SSTI
Media
CVE-2025-54417
Craft CMS has a theoretical bypass for CVE-2025-23209
Media
Explotada en ataques
CVE-2025-35939
Craft CMS stores arbitrary content provided by unauthenticated users in session files
Alta
CVE-2025-46731
Craft CMS Contains a Potential Remote Code Execution Vulnerability via Twig SSTI
Crítica
Explotada en ataques
CVE-2025-32432
Craft CMS Allows Remote Code Execution
Alta
Explotada en ataques
CVE-2025-23209
Craft CMS has a potential RCE with a compromised security key
Crítica
Explotada en ataques
CVE-2024-56145
Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled
Alta
CVE-2024-52293
Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI
Alta
CVE-2024-52292
Craft CMS Arbitrary System File Read
Alta
CVE-2024-52291
Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Media
CVE-2024-45406
Craft CMS vulnerable to stored XSS in breadcrumb list and title fields
Media
CVE-2024-41800
Craft CMS Allows TOTP Token To Stay Valid After Use
Crítica
CVE-2024-37843
Craft CMS SQL injection vulnerability via the GraphQL API endpoint
Alta
CVE-2023-36260
Craft CMS Feed-Me
Media
CVE-2024-21622
Craft CMS Privilege Escalation
Crítica
CVE-2023-41892
Craft CMS Remote Code Execution vulnerability
Alta
CVE-2023-40035
Craft CMS vulnerable to Remote Code Execution via validatePath bypass
Media
CVE-2023-33495
Craft CMS vulnerable to HTML injection
Media
CVE-2023-2817
Stored cross site scripting in Craft CMS
Media
CVE-2023-33197
Craft CMS stored XSS in indexedVolumes
Media
CVE-2023-33196
Craft CMS stored XSS in review volume
Media
CVE-2023-33195
Craft CMS XSS in RSS widget feed
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.