Media
CVE-2025-52573
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 919
Restablecer filtros
Alta
CVE-2025-49141
HaxCMS-PHP Command Injection Vulnerability
Media
CVE-2024-52588
Strapi allows Server-Side Request Forgery in Webhook function
Media
CVE-2025-32388
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
Media
CVE-2025-71332
FlowiseDB vulnerable to SQL Injection by authenticated users
Alta
CVE-2025-28269
js-object-utilities Vulnerable to Prototype Pollution
Baja
CVE-2025-3191
React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button
Alta
CVE-2025-71319
image-size Denial of Service via Infinite Loop during Image Processing
Alta
CVE-2024-57083
Redoc Prototype Pollution via `Module.mergeObjects` Component
Baja
CVE-2025-30222
Shescape has potential environment variable exposure on Windows with CMD
Media
CVE-2025-30168
Parse Server has an OAuth login vulnerability
Alta
CVE-2024-12534
Open WebUI Uncontrolled Resource Consumption vulnerability
Alta
CVE-2025-27415
Nuxt allows DOS via cache poisoning with payload rendering response
Media
CVE-2025-30144
Fast-JWT Improperly Validates iss Claims
Alta
CVE-2025-29907
jsPDF Bypass Regular Expression Denial of Service (ReDoS)
Crítica
CVE-2025-29775
xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
Crítica
CVE-2025-29774
xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References
Alta
CVE-2025-59049
Mockoon has a Path Traversal and LFI in the static file serving endpoint
Alta
CVE-2025-27597
Vue I18n Allows Prototype Pollution in `handleFlatJson`
Alta
CVE-2025-27108
DOM Expressions has a Cross-Site Scripting (XSS) vulnerability due to improper use of string.replace
Alta
CVE-2025-25283
parse-duration has a Regex Denial of Service that results in event loop delay and out of memory
Alta
CVE-2025-24876
Authentication bypass in @sap/approuter
Crítica
CVE-2025-24981
Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc
Crítica
CVE-2024-57077
utils-extend Prototype Pollution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.