Media
CVE-2025-30360
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 757
Restablecer filtros
Media
CVE-2025-30359
webpack-dev-server users' source code may be stolen when they access a malicious web site
Alta
CVE-2025-48387
tar-fs can extract outside the specified dir with a specific tarball
Media
CVE-2018-25110
Marked allows Regular Expression Denial of Service (ReDoS) attacks
Alta
CVE-2025-47934
OpenPGP.js's message signature verification can be spoofed
Alta
CVE-2025-47269
code-server's session cookie can be extracted by having user visit specially crafted proxy URL
Media
ghsa-jqx4-9gpq-rppm
@misskey-dev/summaly allows IP Filter Bypass via Redirect
Media
ghsa-wfm2-rq5g-f8v5
@account-kit/smart-contracts Allowlist Module Bypass Vulnerability
Media
CVE-2025-32791
Permission policy information leakage in Backstage permission system
Media
CVE-2025-32388
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
Media
CVE-2025-32395
Vite has an `server.fs.deny` bypass with an invalid `request-target`
Media
ghsa-qq4x-c6h6-rfxh
aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct
Media
CVE-2025-26042
Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Alta
CVE-2024-12905
tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File
Media
CVE-2025-30352
Directus `search` query parameter allows enumeration of non permitted fields
Baja
CVE-2025-30351
Suspended Directus user can continue to use session token to access API
Baja
CVE-2025-2792
@mozilla/readability Denial of Service through Regex
Baja
ghsa-5pq3-h73f-66hr
AWS CDK CodePipeline: trusted entities are too broad
Media
CVE-2025-2598
AWS CDK CLI prints AWS credentials retrieved by custom credential plugins
Media
CVE-2025-30144
Fast-JWT Improperly Validates iss Claims
Crítica
CVE-2025-71333
Flowise Pre-auth Arbitrary File Upload
Alta
CVE-2025-59049
Mockoon has a Path Traversal and LFI in the static file serving endpoint
Media
CVE-2025-27408
Manifest Uses a One-Way Hash without a Salt
Media
CVE-2025-25290
@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.