Media
CVE-2025-27794
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 851
Restablecer filtros
Media
CVE-2024-11718
tarteaucitron.js for WordPress < 0.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
Alta
ghsa-2237-5r9w-vm8j
Connect-CMS information that is restricted to viewing is visible
Media
CVE-2025-24980
Pimcore Admin Classic Bundle allows user enumeration
Media
CVE-2024-55945
TYPO3 DB Check Module vulnerable to Cross-Site Request Forgery
Alta
CVE-2024-55924
TYPO3 Scheduler Module vulnerable to Cross-Site Request Forgery
Media
CVE-2024-55923
TYPO3 Indexed Search Module vulnerable to Cross-Site Request Forgery
Media
CVE-2024-55922
TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery
Alta
CVE-2024-55921
TYPO3 Extension Manager Module vulnerable to Cross-Site Request Forgery
Media
CVE-2024-55920
TYPO3 Cross-Site Request Forgery in Dashboard Module
Media
CVE-2024-55894
TYPO3 Cross-Site Request Forgery in Backend User Module
Media
CVE-2024-55893
TYPO3 Cross-Site Request Forgery in Log Module
Alta
CVE-2025-21612
Extension:TabberNeue vulnerable to Cross-site Scripting
Alta
CVE-2024-56361
lgsl Stored Cross-Site Scripting vulnerability
Alta
CVE-2024-54141
phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available
Media
CVE-2024-52806
SimpleSAMLphp SAML2 has an XXE in parsing SAML messages
Alta
CVE-2024-52596
SimpleSAMLphp xml-common XXE vulnerability
Sin evaluar
CVE-2024-13298
drupal/tarte_au_citron - SA-CONTRIB-2024-064
Crítica
CVE-2024-51092
LibreNMS has an Authenticated OS Command Injection
Alta
CVE-2024-52293
Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI
Alta
CVE-2024-52291
Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Baja
CVE-2024-51758
Filament has exported files stored in default (`public`) filesystem if not reconfigured
Alta
CVE-2024-51478
YesWiki Uses a Broken or Risky Cryptographic Algorithm
Media
CVE-2024-46998
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.