Alta
CVE-2024-57082
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.632
Alta
CVE-2024-57080
vxe-table prototype pollution
Alta
CVE-2024-57068
@tanstack/form-core prototype pollution
Alta
CVE-2024-57072
module-from-string prototype pollution
Alta
CVE-2024-57066
@ndhoule/defaults prototype pollution
Crítica
CVE-2025-1061
Nextend Social Login Pro <= 3.1.16 - Authentication Bypass via Apple OAuth provider
Media
CVE-2025-71404
Better Auth URL parameter HTML Injection (Reflected Cross-Site scripting)
Media
CVE-2024-10973
Keycloak on Quarkus CLI option for encrypted JGroups ignored
Media
CVE-2025-0859
Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
Alta
CVE-2024-13487
CURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
Crítica
CVE-2024-36404
GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
Media
CVE-2025-1026
Browsershot Local File Inclusion
Alta
CVE-2025-1025
Cockpit Arbitrary File Upload
Alta
CVE-2025-1022
Browsershot Path Traversal
Media
CVE-2024-10563
WooCommerce Cart Count Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-12737
WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Reflected Cross-Site Scripting
Crítica
CVE-2025-24964
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
Media
CVE-2025-24963
Vitest browser mode serves arbitrary files
Media
CVE-2024-13829
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.8 - Unauthenticated Sensitive Information Exposure
Media
CVE-2024-27137
Apache Cassandra: unrestricted deserialization of JMX authentication credentials
Media
CVE-2025-24860
Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions
Alta
CVE-2025-23015
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
Baja
CVE-2025-0148
Jenkins Zoom Plugin is Missing Password Field Masking
Media
CVE-2025-0688
Spiritual Gifts Survey <= 0.9.10 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.