Alta
CVE-2025-49070
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.741
Alta
CVE-2025-4414
CMSMasters Content Composer < 2.5.7 - Unauthenticated Local File Inclusion
Media
CVE-2025-28956
Backwp <= 2.0.2 - Reflected Cross-Site Scripting
Crítica
CVE-2025-52718
Alone <= 7.8.2 - Unauthenticated Remote Code Execution
Media
CVE-2025-49032
Gutenberg Blocks <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-47627
PrivateContent - Mail Actions <= 2.3.2 - Unauthenticated Local File Inclusion
Media
CVE-2025-5692
Lead Form Data Collection to CRM <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Many Actions
Alta
CVE-2025-52724
Amwerk <= 1.2.0 - Unauthenticated PHP Object Injection
Media
CVE-2025-49866
Beautiful Cookie Consent Banner <= 4.6.1 - Reflected Cross-Site Scripting
Alta
CVE-2025-52831
Video List Manager <= 1.7 - Unauthenticated SQL Injection
Alta
CVE-2025-49029
Custom Login And Signup Widget <= 1.0 - Authenticated (Administrator+) Remote Code Execution
Alta
CVE-2025-52729
Diza <= 1.3.9 - Unauthenticated Local File Inclusion
Media
CVE-2025-5314
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.65 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source'
Media
CVE-2025-6756
Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode
Alta
CVE-2025-53106
Graylog vulnerable to privilege escalation through API tokens
Alta
CVE-2025-53107
@cyanheads/git-mcp-server vulnerable to command injection in several tools
Media
CVE-2024-46993
Electron vulnerable to Heap Buffer Overflow in NativeImage
Crítica
CVE-2025-6934
Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'
Crítica
CVE-2025-26074
Conductor vulnerable to OS command injection through unrestricted access to Java classes
Baja
CVE-2025-45143
string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS)
Alta
CVE-2024-46992
electron ASAR Integrity bypass by just modifying the content
Alta
CVE-2025-53003
Janssen Config API returns results without scope verification
Alta
CVE-2024-49365
tiny-secp256k1 allows for verify() bypass when running in bundled environment
Alta
CVE-2024-49364
tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.