Alta
CVE-2025-59141
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.624
Restablecer filtros
Alta
CVE-2025-59140
backslash@0.2.1 contains malware after npm account takeover
Crítica
CVE-2025-71324
Flowise has an Arbitrary File Read
Crítica
CVE-2025-58434
Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover
Alta
CVE-2025-58754
Axios is vulnerable to DoS attack through lack of data size check
Crítica
CVE-2025-59046
interactive-git-checkout has a Command Injection vulnerability
Alta
CVE-2025-59041
Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email
Alta
CVE-2025-58765
Webrecorder packages are vulnerable to XSS through 404 error handling logic
Baja
CVE-2025-58751
Vite middleware may serve files starting with the same name with the public directory
Alta
ghsa-ph6w-f82w-28w6
Claude Code Vulnerable to Arbitrary Code Execution Due to Insufficient Startup Warning
Alta
CVE-2025-58047
Volto affected by possible DoS by invoking specific URL by anonymous user
Media
ghsa-hmfr-rx46-4jx2
GraphQL Armor Max-Depth Plugin Bypass via Introspection Query Obfuscation
Alta
CVE-2025-57810
jsPDF Denial of Service (DoS)
Media
CVE-2025-57753
vite-plugin-static-copy files not included in `src` are possible to access with a crafted request
Crítica
CVE-2025-55746
Directus allows unauthenticated file upload and file modification due to lacking input sanitization
Media
CVE-2025-55152
Oak Server has ReDoS in x-forwarded-proto and x-forwarded-for headers
Baja
ghsa-xcxh-6cv4-q8p8
HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit
Media
CVE-2025-54793
Astros's duplicate trailing slash feature leads to an open redirection security issue
Baja
CVE-2025-54798
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter
Media
CVE-2025-54387
IPX Allows Path Traversal via Prefix Matching Bypass
Crítica
CVE-2025-54782
@nestjs/devtools-integration: CSRF to Sandbox Escape Allows for RCE against JS Developers
Alta
CVE-2025-54586
GitProxy Hidden Commits Injection
Alta
CVE-2025-54585
GitProxy New Branch Approval Exploit
Alta
CVE-2025-54584
GitProxy Backfile Parsing Exploit
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.