Media
CVE-2025-55296
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 851
Restablecer filtros
Alta
CVE-2025-54378
HAX CMS API Lacks Authorization Checks
Media
CVE-2025-54139
HAX CMS application pages vulnerable to clickjacking
Alta
ghsa-49xw-hw94-fmv2
Dolibarr has Remote Code Execution Vulnerability (Bypass)
Alta
CVE-2025-53369
Citizen Short Description stored XSS vulnerability through wikitext
Alta
CVE-2025-53370
Citizen vulnerable to Stored XSS through short descriptions
Alta
CVE-2025-53368
starcitizentools/citizen-skin is vulnerable to Stored XSS attack in the legacy search bar through page descriptions
Media
CVE-2025-34076
Microweber CMS API has authenticated local file inclusion vulnerability
Alta
CVE-2025-53093
TabberNeue vulnerable to Stored XSS through wikitext
Media
CVE-2025-49578
starcitizentools/citizen-skin allows stored XSS in user registration date message
Media
CVE-2025-49579
starcitizentools/citizen-skin allows stored XSS in menu heading message
Media
CVE-2025-49577
starcitizentools/citizen-skin allows stored XSS in preference menu heading messages
Media
CVE-2025-49576
starcitizentools/citizen-skin allows stored XSS in search no result messages
Media
CVE-2025-49575
Citizen skin vulnerable to stored XSS through multiple system messages
Sin evaluar
CVE-2025-48916
drupal/bookable_calendar - SA-CONTRIB-2025-070
Media
CVE-2024-47056
Mautic does not shield .env files from web traffic
Baja
CVE-2025-47936
TYPO3 CMS Webhooks Server Side Request Forgery
Media
CVE-2025-46734
league/commonmark contains a XSS vulnerability in Attributes extension
Alta
CVE-2025-46347
YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution
Crítica
CVE-2025-46348
YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download
Media
CVE-2025-26159
Laravel Starter Cross Site Scripting (XSS)
Media
ghsa-5pm7-cp8f-p2c2
wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities
Media
CVE-2025-31476
drupal/tacjs - SA-CONTRIB-2025-027
Media
CVE-2025-31677
drupal/ai - SA-CONTRIB-2025-003
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.