Media
Explotada en ataques
CVE-2025-31125
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-31116
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
Media
CVE-2025-26042
Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Alta
CVE-2025-2008
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2025-2999
A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attac
Media
CVE-2025-2998
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory co
Baja
CVE-2025-3000
PyTorch is vulnerable to memory corruption through its torch.jit.script function
Media
CVE-2025-2967
ConcreteCMS Cross-Site Scripting (XSS) via HTML Block Text Field
Media
CVE-2025-2961
Solon Vulnerable to Path Traversal
Media
CVE-2025-31617
PostmarkApp Email Integrator <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-31597
Ultimate Live Cricket WordPress Lite <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2025-2237
WP RealEstate <= 1.6.26 - Unauthenticated Privilege Escalation via 'process_register'
Media
CVE-2025-31616
Varnish WordPress <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-31542
My auctions allegro <= 3.6.20 - Authenticated (Contributor+) SQL Injection
Media
CVE-2025-31592
Send E-mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-31601
Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change
Media
CVE-2025-31596
Chat by Chatwee <= 2.1.3 - Missing Authorization
Media
CVE-2025-31557
OSM – OpenStreetMap <= 6.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-31566
Rio Video Gallery <= 2.3.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-31621
byBrick Accordion <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-31625
Useinfluence <= 1.0.8 - Cross-Site Request Forgery
Media
CVE-2025-31529
Slider Path for Elementor <= 3.0.0 - Missing Authorization
Media
CVE-2025-31620
CoverManager <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-31376
NanoSupport <= 0.6.0 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.