Media
CVE-2025-55155
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.406
Restablecer filtros
Media
CVE-2025-46556
MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length
Alta
CVE-2025-47776
MantisBT vulnerable to authentication bypass for some passwords due to PHP type juggling
Alta
CVE-2025-64112
Statamic Vulnerable to Superadmin Account Takeover via Stored Cross-Site Scripting and Lack of Proper X-CSRF-TOKEN Server-Side Validation
Media
CVE-2025-12083
drupal/civictheme - SA-CONTRIB-2025-113
Alta
CVE-2025-12082
drupal/civictheme - SA-CONTRIB-2025-112
Media
CVE-2025-10927
drupal/plausible_tracking - SA-CONTRIB-2025-107
Media
CVE-2025-62798
Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax
Media
CVE-2025-62796
PrivateBin is missing HTML sanitization of attached filename in file size hint
Media
CVE-2025-62398
Moodle does not properly enforce MFA
Media
CVE-2025-62394
Moodle sends quiz-related messages to inactive/suspended users
Media
CVE-2025-62393
Moodle course access permissions are not properly checked in course_output_fragment_course_overview
Alta
CVE-2025-62617
Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality
Media
ghsa-27c9-vp3w-6ww8
Shopware exposes sensitive user information via CSV export mapping
Baja
ghsa-3cpp-fv95-mpr5
Shopware vulnerable to Server-Side Request Forgery (SSRF) – order invoice
Baja
ghsa-6wh5-mw9h-5c3w
Shopware vulnerable to path traversal via Plugin upload
Media
ghsa-m895-2hj3-8cg9
Shopware vulnerable to MediaVisibilityRestrictionSubscriber bypass when reading media entities by aggregating fields individually
Media
CVE-2025-62508
Citizen vulnerable to stored XSS in sticky header button messages
Baja
CVE-2025-61417
TastyIgniter vulnerable to Cross-Site Scripting
Media
CVE-2025-62414
bagisto has Cross Site Scripting (XSS) in Create New Customer
Crítica
CVE-2025-62417
bagisto has CSV Formula Injection in Create New Product
Media
CVE-2025-62418
bagisto has a Cross Site Scripting (XSS) vulnerability in TinyMCE Image Upload (SVG)
Media
CVE-2025-62416
bagisto has Server Side Template Injection (SSTI) in Product Description
Baja
CVE-2025-62412
LibreNMS alert-rules has a Cross-Site Scripting Vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.