Media
CVE-2023-53929
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.068
Restablecer filtros
Media
ghsa-vvg7-8rmq-92g7
Auth0 WordPress has Improper Audience Validation via Auth0-PHP SDK Dependency
Media
ghsa-f3r2-88mq-9v4g
Auth0 Symfony SDK has Improper Audience Validation via Auth0-PHP SDK
Media
ghsa-7hh9-gp72-wh7h
Auth0 Laravel SDK has Improper Audience Validation via Auth0-PHP SDK dependency
Media
CVE-2025-68129
Auth0-PHP SDK has Improper Audience Validation
Crítica
CVE-2025-67165
Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component
Crítica
CVE-2025-67164
Pagekit CMS is vulnerable to OS Command Injection via Storage component
Sin evaluar
CVE-2025-14840
drupal/http_client_manager - SA-CONTRIB-2025-126
Media
CVE-2025-68113
ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay
Media
CVE-2025-66843
Grav is vulnerable to Stored XSS through authenticated user-edited content
Crítica
CVE-2025-66844
Grav may be vulnerable to SSRF attack via Twig Templates
Crítica
CVE-2025-65854
MineAdmin has an insecure default password
Alta
CVE-2024-58303
FoF Pretty Mail has a server-side template injection vulnerability
Baja
CVE-2025-67737
AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCE
Crítica
CVE-2025-67719
Ibexa User Bundle is missing password change validation
Sin evaluar
CVE-2025-14472
drupal/acquia_contenthub - SA-CONTRIB-2025-125
Alta
CVE-2025-67648
Shopware Storefront Reflected XSS in Storefront Login Page
Crítica
ghsa-5j8p-438x-rgg5
SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475
Crítica
CVE-2025-67510
Neuron MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)
Alta
CVE-2025-67509
Neuron MySQLSelectTool “read-only” bypass via `SELECT ... INTO OUTFILE` (file write → potential RCE)
Alta
CVE-2025-67507
Filament multi-factor authentication (app) recovery codes can be used multiple times
Media
CVE-2025-66578
robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation
Alta
CVE-2025-65346
alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality
Baja
CVE-2025-65345
alexusmai laravel-file-manager is vulnerable to Directory Traversal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.