Media
CVE-2025-49938
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.687
Media
CVE-2025-10619
@sequa-ai/sequa-mcp has Command Injection vulnerability
Media
CVE-2025-56648
Parcel has an Origin Validation Error vulnerability
Media
CVE-2025-9992
Ghost Kit <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-8565
Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation
Baja
CVE-2025-59414
Nuxt has Client-Side Path Traversal in Nuxt Island Payload Revival
Media
CVE-2025-8419
Keycloak SMTP Inject Vulnerability
Crítica
CVE-2025-59340
jinjava has Sandbox Bypass via JavaType-Based Deserialization
Media
CVE-2025-59476
Jenkins has a log message injection vulnerability
Media
CVE-2025-59474
Jenkins has a missing permission check, allowing users to obtain agent names
Media
CVE-2025-59475
Jenkins is missing a permission check in the authenticated users' profile menu
Crítica
CVE-2025-10157
Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports
Crítica
CVE-2025-10156
Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
Crítica
CVE-2025-10155
Picklescan Bypass is Possible via File Extension Mismatch
Media
CVE-2025-43804
Liferay search widget vulnerable to Cross-site Scripting
Media
CVE-2025-43805
Liferay Portal allows remote attackers to view display page templates via crafted URLs
Media
CVE-2025-9708
Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain
Alta
CVE-2025-58995
Leblix <= 2.4 - Unauthenticated Local File Inclusion
Media
CVE-2025-58918
Entrada <= 5.7.7 - Cross-Site Request Forgery
Media
CVE-2025-10635
Find Me On <= 2.0.9.1 - Authenticated (Subscriber+) SQL Injection
Crítica
CVE-2025-58963
Medcity < 1.1.9 - Unauthenticated Arbitrary File Upload
Media
CVE-2025-58917
Quantities and Units for WooCommerce <= 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-10493
Chained Quiz <= 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie
Media
CVE-2025-64352
Essential Addons for Elementor <= 6.2.4 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.