Media
CVE-2025-63015
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-66083
WpEvently <= 5.0.4 - Missing Authorization
Baja
CVE-2025-65345
alexusmai laravel-file-manager is vulnerable to Directory Traversal
Alta
CVE-2024-3884
Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded
Media
CVE-2025-66404
mcp-server-kubernetes has potential security issue in exec_in_pod tool
Crítica
ghsa-fmh4-wr37-44fp
React Server Components are Vulnerable to RCE
Crítica
Explotada en ataques
CVE-2025-55182
React Server Components are Vulnerable to RCE
Crítica
ghsa-9qr9-h5gf-34mp
Next.js is vulnerable to RCE in React flight protocol
Sin evaluar
CVE-2025-13986
drupal/disable_login - SA-CONTRIB-2025-124
Sin evaluar
CVE-2025-13985
drupal/entity_share - SA-CONTRIB-2025-123
Sin evaluar
CVE-2025-13984
drupal/next - SA-CONTRIB-2025-122
Sin evaluar
CVE-2025-13983
drupal/tagify - SA-CONTRIB-2025-121
Sin evaluar
CVE-2025-13982
drupal/login_time_restriction - SA-CONTRIB-2025-120
Sin evaluar
CVE-2025-13981
drupal/ai - SA-CONTRIB-2025-119
Sin evaluar
CVE-2025-13980
drupal/ckeditor5_premium_features - SA-CONTRIB-2025-118
Sin evaluar
CVE-2025-13979
drupal/minisite - SA-CONTRIB-2025-117
Media
CVE-2025-12826
Custom Post Type UI <= 1.18.0 - Missing Authorization to Unauthenticated (Previously Administrator+) Custom Post Type Modification
Media
CVE-2025-12782
Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering
Media
CVE-2025-13513
Clik stats <= 0.8 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Baja
CVE-2025-66453
Rhino has high CPU usage and potential DoS when passing specific numbers to `toFixed()` function
Alta
CVE-2025-66032
Claude Code Command Validation Bypass Allows Arbitrary Code Execution
Alta
CVE-2025-11727
Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration - Powered by Codisto <= 1.3.65 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-11379
WebP Express <= 0.25.9 - Unauthenticated Information Exposure
Alta
CVE-2025-66468
Aimeos GrapesJS CMS extension has possible stored XSS that's exploitable by authenticated editors
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.