Alta
CVE-2025-59343
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-57354
counterpart vulnerable to prototype pollution
Media
CVE-2025-57350
CSVTOJSON has a prototype pollution vulnerability
Baja
CVE-2025-57352
min-document vulnerable to prototype pollution
Media
CVE-2025-57353
messageformat prototype pollution vulnerability
Baja
CVE-2025-10909
Mangati NovoSGA XSS vulnerability in /admin
Media
CVE-2025-58457
Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands
Media
CVE-2025-48392
Apache IoTDB: DoS Vulnerability
Media
CVE-2025-48459
Deserialization of Untrusted Data vulnerability in Apache IoTDB.
Media
CVE-2025-43819
Liferay Portal and DXP does not properly expire sessions
Alta
CVE-2025-58592
TranslatePress <= 2.10.2 - Unauthenticated PHP Object Injection
Alta
CVE-2025-10406
BlindMatrix e-Commerce = 3.0 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2025-58914
Di Themes Demo Site Importer <= 1.2 - Cross-Site Request Forgery
Alta
CVE-2025-58996
Advanced Settings <= 3.1.1 - Authenticated (Author+) Arbitrary File Upload
Media
CVE-2024-6429
WSO2 Identity Server Apps allows content spoofing in logs
Baja
CVE-2025-57407
GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability
Media
CVE-2025-59822
Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section
Media
CVE-2025-4760
WSO2 carbon-apimgt affected by an authenticated stored cross-site scripting (XSS) vulnerability
Media
CVE-2025-59821
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
Baja
CVE-2025-59546
DNN Vulnerable to Stored XSS Using Backend Admin Credentials
Crítica
CVE-2025-59545
DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
Media
CVE-2025-43814
Liferay Portal and DXP audit events record password reminder answers
Media
CVE-2025-43806
Liferay Portal and DXP does not properly check permission with import and export tasks
Media
CVE-2025-43810
Liferay Portal and DXP allows users to add a note to a different virtual instance
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.