Media
CVE-2025-27190
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-27188
Magento Improper Authorization vulnerability
Crítica
CVE-2025-22871
RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency
Media
CVE-2024-52981
Elasticsearch Vulnerable to Stack Overflow due to a Large Recursion
Media
CVE-2025-25226
Joomla Framework Database Package Vulnerable to SQL Injection
Alta
CVE-2025-25227
Joomla CMS Multi-Factor Authentication Bypass
Media
CVE-2024-52980
Elasticsearch-grok Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function
Media
ghsa-68wv-g3fw-pq7q
Shopware Broken ACL on Document retrieval to access other customers documents
Alta
CVE-2025-27892
Shopware Vulnerable to Blind SQL-injection in DAL aggregations
Media
CVE-2025-3100
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
Baja
CVE-2025-30166
Pimcore's Admin Classic Bundle allows HTML Injection
Alta
CVE-2025-30151
Shopware allows Denial Of Service via password length
Media
CVE-2025-30150
Shopware 6 allows attackers to check for registered accounts through the store-api
Alta
CVE-2025-31599
Bulk Product Sync <= 8.6 - Unauthenticated SQL Injection
Alta
CVE-2025-32145
WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection
Alta
CVE-2025-32140
WP Remote Thumbnail <= 1.3.2 - Authenticated (Contributor+) Arbitrary File Upload
Media
CVE-2024-12273
Calculated Fields Form <= 5.2.61 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2025-32206
Processing Projects <= 1.0.2 - Authenticated (Shop Manager+) Arbitrary File Upload
Media
CVE-2025-32214
Hive Support <= 1.2.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2025-32240
Site Notify <= 1.0 - Missing Authorization
Alta
CVE-2025-31524
WP User Profiles <= 2.6.2 - Authenticated (Subscriber+) Privilege Escalation
Alta
CVE-2025-32202
Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Authenticated (Editor+) Arbitrary File Upload
Media
CVE-2025-2883
Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposure
Media
CVE-2025-32029
ts-asn1-der has Incorrect DER Encoding of Numbers Leading to Denial of Service and Incorrect Value Representation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.