Media
CVE-2025-9490
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-54743
Download After Email 2.1.5 - 2.1.6 - Unauthorized Repeated Form Submissions
Media
CVE-2025-10037
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection
Alta
CVE-2025-10747
WP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload
Media
CVE-2025-64273
Email marketing for WordPress by GetResponse Official <= 1.5.3 - Missing Authorization
Media
CVE-2025-10307
Backuply – Backup, Restore, Migrate and Clone <= 1.4.8 - Authenticated (Admin+) Arbitrary File Deletion
Media
CVE-2025-59426
lobe-chat has an Open Redirect
Media
CVE-2025-57324
parse is vulnerable to prototype pollution
Baja
CVE-2025-57327
spmrc vulnerable to prototype pollution
Baja
CVE-2025-57329
web3-core-method is vulnerable to prototype pollution
Baja
CVE-2025-57328
toggle-array vulnerable to prototype pollution
Media
CVE-2025-57320
json-schema-editor-visual vulnerable to prototype pollution
Alta
CVE-2025-57318
csvjson vulnerable to prototype injection
Alta
CVE-2025-57323
mpregular vulnerable to prototype pollution
Baja
CVE-2025-57326
sassdoc-extras vulnerable to prototype pollution
Baja
CVE-2025-57348
node-cube vulnerable to prototype pollution
Baja
CVE-2025-57321
magix-combine-ex vulnerable to prototype pollution
Media
CVE-2025-57351
ts-fns has prototype pollution vulnerability
Baja
CVE-2025-57349
messageformat has a prototype pollution vulnerability
Baja
CVE-2025-57330
web3-core-subscriptions has a Prototype Pollution vulnerability
Alta
CVE-2025-59839
Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes
Media
CVE-2025-61685
Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure
Crítica
CVE-2025-59834
Command Injection in adb-mcp MCP Server
Alta
CVE-2025-59828
Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.