Crítica
CVE-2025-49261
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.741
Crítica
CVE-2025-49252
Besa <= 2.3.8 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-49259
Hara <= 1.2.10 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-32510
Ovatheme Events Manager <= 1.8.4 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2025-49255
Ruza <= 1.0.7 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-49071
Flozen < 1.5.1 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2025-49258
Maia <= 1.1.15 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-49444
Reformer for Elementor <= 1.0.5 - Unauthenticated Arbitrary File Upload
Media
CVE-2025-30988
Elite Video Player <= 10.0.5 - Reflected Cross-Site Scripting
Crítica
CVE-2025-49253
Lasa <= 1.1 - Unauthenticated Local File Inclusion
Media
CVE-2025-49266
Ultimate Reviews <= 3.2.14 - Reflected Cross-Site Scripting
Crítica
CVE-2025-49260
Aora <= 1.3.9 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-24761
DSK < 2.4 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-28991
Evon <= 3.4 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-36852
@nx/azure-cache Vulnerable to Build Cache Poisoning via Untrusted Pull Requests
Alta
ghsa-68cf-j696-wvv9
GeoServer vulnerable to SSRF in TestWfsPost for specific targets, e.g. PHP + Nginx
Alta
ghsa-2p76-gc46-5fvc
GeoNetwork affected by XML External Entity (XXE) processing vulnerability in WFS indexing REST API endpoint
Alta
CVE-2025-30220
[XBOW-025-068] XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service
Alta
CVE-2025-30145
GeoServer Infinite Loop Vulnerability in Jiffle process
Media
CVE-2025-27505
GeoServer Missing Authorization on REST API Index
Alta
CVE-2024-57190
Erxes Incorrect Access Control vulnerability
Media
CVE-2024-57189
Erxes Path Traversal vulnerability
Alta
CVE-2024-57186
Erxes Path Traversal vulnerability
Alta
CVE-2025-43585
Magento Improper Authorization leading to security feature bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.