Alta
CVE-2025-54888
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 564
Restablecer filtros
Media
CVE-2025-54793
Astros's duplicate trailing slash feature leads to an open redirection security issue
Alta
CVE-2025-54073
mcp-package-docs vulnerable to command injection in several tools
Alta
CVE-2025-53832
@translated/lara-mcp vulnerable to command injection in import_tmx tool
Media
CVE-2025-53892
vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes
Alta
CVE-2025-53355
MCP Server Kubernetes vulnerable to command injection in several tools
Alta
CVE-2025-53372
Node.js Sandbox MCP Server vulnerability can lead to Sandbox Escape via Command Injection
Alta
CVE-2025-53107
@cyanheads/git-mcp-server vulnerable to command injection in several tools
Media
CVE-2025-50183
OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer
Media
CVE-2025-47948
Cocotais Bot has builtin .echo command injection
Media
CVE-2025-46343
n8n Vulnerable to Stored XSS through Attachments View Endpoint
Alta
CVE-2025-32020
crud-query-parser SQL Injection vulnerability
Media
ghsa-qq4x-c6h6-rfxh
aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct
Media
CVE-2025-27793
Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace]
Media
CVE-2025-26619
Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode expressionInterpeter
Baja
CVE-2025-30222
Shescape has potential environment variable exposure on Windows with CMD
Media
CVE-2025-27506
NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page
Media
CVE-2025-27143
Beter Auth has an Open Redirect via Scheme-Less Callback Parameter
Media
CVE-2025-25285
@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Media
CVE-2025-23221
Infinite loop and Blind SSRF found inside the Webfinger mechanism in @fedify/fedify
Crítica
CVE-2024-48914
Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy
Media
CVE-2024-47529
OpenC3 stores passwords in clear text (`GHSL-2024-129`)
Media
CVE-2024-43795
OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)
Baja
CVE-2024-47171
Agnai vulnerable to Relative Path Traversal in Image Upload
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.