Alta
CVE-2025-2805
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-2719
Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Sin evaluar
CVE-2025-3474
drupal/panels - SA-CONTRIB-2025-033
Sin evaluar
CVE-2025-3131
drupal/eca - SA-CONTRIB-2025-031
Sin evaluar
CVE-2025-3475
drupal/webt - SA-CONTRIB-2025-030
Alta
CVE-2025-3102
SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation
Media
CVE-2025-32381
xgrammar Vulnerable to Denial of Service (DoS) by abusing unbounded cache in memory
Media
CVE-2025-27391
Apache ActiveMQ Artemis Vulnerable to Insertion of Sensitive Information into Log File
Baja
CVE-2025-32378
Shopware default newsletter opt-in settings allow for mass sign-up abuse
Media
ghsa-5pm7-cp8f-p2c2
wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities
Media
CVE-2025-32379
Koajs vulnerable to Cross-Site Scripting (XSS) at ctx.redirect() function
Crítica
CVE-2025-32375
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting
Media
CVE-2025-32372
DotNetNuke.Core Vulnerable to Server-Side Request Forgery (SSRF)
Alta
CVE-2025-32020
crud-query-parser SQL Injection vulnerability
Alta
CVE-2025-32017
Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users
Media
CVE-2025-31672
Apache POI OOXML Vulnerable to Improper Input Validation in OOXML File Parsing
Media
CVE-2025-30677
Apache Pulsar Kafka Connector Logs Sensitive Information in Application Logs
Alta
CVE-2025-29189
Flowise Vulnerable to SQL Injection via `tableName` Parameter
Media
CVE-2025-32691
PowerPress Podcasting <= 11.12.6 - Authenticated (Contributor+) Server-Side Request Forgery
Media
CVE-2025-32567
Easy Post Duplicator <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-31383
FrescoChat Live Chat <= 3.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-31375
Scheduled <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-32541
WooCommerce Sales MIS Report <= 4.0.3 - Reflected Cross-Site Scripting
Media
CVE-2025-31026
Comment Validation Reloaded <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.