Baja
CVE-2025-57328
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.757
Media
CVE-2025-57320
json-schema-editor-visual vulnerable to prototype pollution
Alta
CVE-2025-57318
csvjson vulnerable to prototype injection
Alta
CVE-2025-57323
mpregular vulnerable to prototype pollution
Baja
CVE-2025-57326
sassdoc-extras vulnerable to prototype pollution
Baja
CVE-2025-57348
node-cube vulnerable to prototype pollution
Baja
CVE-2025-57321
magix-combine-ex vulnerable to prototype pollution
Media
CVE-2025-57351
ts-fns has prototype pollution vulnerability
Baja
CVE-2025-57349
messageformat has a prototype pollution vulnerability
Baja
CVE-2025-57330
web3-core-subscriptions has a Prototype Pollution vulnerability
Alta
CVE-2025-59839
Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes
Media
CVE-2025-61685
Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure
Crítica
CVE-2025-59834
Command Injection in adb-mcp MCP Server
Alta
CVE-2025-59828
Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions
Alta
CVE-2025-59343
tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball
Media
CVE-2025-57354
counterpart vulnerable to prototype pollution
Media
CVE-2025-57350
CSVTOJSON has a prototype pollution vulnerability
Baja
CVE-2025-57352
min-document vulnerable to prototype pollution
Media
CVE-2025-57353
messageformat prototype pollution vulnerability
Baja
CVE-2025-10909
Mangati NovoSGA XSS vulnerability in /admin
Media
CVE-2025-58457
Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands
Media
CVE-2025-48392
Apache IoTDB: DoS Vulnerability
Media
CVE-2025-48459
Deserialization of Untrusted Data vulnerability in Apache IoTDB.
Media
CVE-2025-43819
Liferay Portal and DXP does not properly expire sessions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.