Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

CVE ID Publicado Severidad CVSS Descripción
CVE-2025-39499 2025-05-23 CRITICAL 9.8 Deserialization of Untrusted Data vulnerability in BoldThemes Medicare allows Object Injection. This issue affects Medicare: from n/a through 2.1.0.
CVE-2025-39495 2025-05-23 CRITICAL 9.8 Deserialization of Untrusted Data vulnerability in BoldThemes Avantage allows Object Injection. This issue affects Avantage: from n/a through 2.4.6.
CVE-2025-39494 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër allows PHP…
CVE-2025-39490 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler allows…
CVE-2025-39489 2025-05-23 CRITICAL 9.8 Incorrect Privilege Assignment vulnerability in pebas CouponXL allows Privilege Escalation. This issue affects CouponXL: from n/a through 4.5.0.
CVE-2025-39485 2025-05-23 CRITICAL 9.8 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour | Travel Agency WordPress allows Object Injection. This issue affects Grand…
CVE-2025-39480 2025-05-23 CRITICAL 9.8 Deserialization of Untrusted Data vulnerability in ThemeMakers Car Dealer allows Object Injection. This issue affects Car Dealer: from n/a through…
CVE-2025-32309 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Healsoul allows PHP…
CVE-2025-32302 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Winnex allows PHP…
CVE-2025-32294 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Oxpitan allows PHP…
CVE-2025-32293 2025-05-23 HIGH 8.8 Deserialization of Untrusted Data vulnerability in designthemes Finance Consultant allows Object Injection. This issue affects Finance Consultant: from n/a through…
CVE-2025-32292 2025-05-23 CRITICAL 9.8 Deserialization of Untrusted Data vulnerability in AncoraThemes Jarvis – Night Club, Concert, Festival WordPress allows Object Injection. This issue affects…
CVE-2025-32289 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Yozi allows PHP…
CVE-2025-32286 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Butcher allows PHP…
CVE-2025-32285 2025-05-23 HIGH 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ApusTheme Butcher allows Reflected XSS. This issue affects…
CVE-2025-32284 2025-05-23 HIGH 8.8 Deserialization of Untrusted Data vulnerability in designthemes Pet World allows Object Injection. This issue affects Pet World: from n/a through…
CVE-2025-31927 2025-05-23 CRITICAL 9.8 Deserialization of Untrusted Data vulnerability in themeton Acerola allows Object Injection. This issue affects Acerola: from n/a through 1.6.5.
CVE-2025-31924 2025-05-23 HIGH 8.8 Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts allows Object Injection. This issue affects Crafts & Arts: from…
CVE-2025-31918 2025-05-23 CRITICAL 9.8 Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro allows Privilege Escalation. This issue affects Simple Business Directory Pro:…
CVE-2025-31916 2025-05-23 CRITICAL 9.0 Unrestricted Upload of File with Dangerous Type vulnerability in joy2012bd JP Students Result Management System Premium allows Upload a Web…
CVE-2025-31914 2025-05-23 CRITICAL 9.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin &…
CVE-2025-31913 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Ogami allows PHP…
CVE-2025-31912 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Enzio - Responsive…
CVE-2025-31636 2025-05-23 HIGH 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SaurabhSharma WP Post Modules for Elementor allows Reflected…
CVE-2025-31633 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kiamo - Responsive…
CVE-2025-31632 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SpyroPress La Boom allows…
CVE-2025-31631 2025-05-23 CRITICAL 9.8 Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House allows Object Injection. This issue affects Fish House: from n/a through…
CVE-2025-31430 2025-05-23 CRITICAL 9.8 Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through…
CVE-2025-31423 2025-05-23 CRITICAL 9.8 Deserialization of Untrusted Data vulnerability in AncoraThemes Umberto allows Object Injection. This issue affects Umberto: from n/a through 1.2.8.
CVE-2025-31397 2025-05-23 CRITICAL 9.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in smartcms Bus Ticket Booking with Seat…
CVE-2025-31069 2025-05-23 CRITICAL 9.8 Deserialization of Untrusted Data vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Object Injection. This issue affects HotStar –…
CVE-2025-31064 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Vizeon - Business…
CVE-2025-31060 2025-05-23 HIGH 8.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Capie allows PHP…
CVE-2025-31056 2025-05-23 CRITICAL 9.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Techspawn WhatsCart - Whatsapp Abandoned Cart…
CVE-2025-31053 2025-05-23 HIGH 7.7 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in quantumcloud KBx Pro Ultimate allows Path Traversal.…
CVE-2025-31049 2025-05-23 CRITICAL 9.8 Deserialization of Untrusted Data vulnerability in themeton Dash allows Object Injection. This issue affects Dash: from n/a through 1.3.
CVE-2025-1123 2025-05-23 HIGH 7.2 The Solid Mail – SMTP email and logging made by SolidWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
CVE-2024-9163 2025-05-23 LOW 3.5 A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3…
CVE-2024-7803 2025-05-23 MEDIUM 6.5 An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0…
CVE-2025-5106 2025-05-23 HIGH 7.3 A vulnerability was found in Fujian Kelixun 1.0. It has been classified as critical. This affects an unknown part of…
CVE-2025-5105 2025-05-23 HIGH 7.3 A vulnerability was found in TOZED ZLT W51 up to 1.4.2 and classified as critical. Affected by this issue is…
CVE-2025-41407 2025-05-23 HIGH 8.3 Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.
CVE-2025-3895 2025-05-23 N/A 0.0 Token used for resetting passwords in MegaBIP software are generated using a small space of random values combined with a queryable…
CVE-2025-3894 2025-05-23 N/A 0.0 Text editor embedded into MegaBIP software does not neutralize user input allowing Stored XSS attacks on other users. In order…
CVE-2025-3893 2025-05-23 N/A 0.0 While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this…
CVE-2025-36527 2025-05-23 HIGH 8.3 Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.
CVE-2025-4379 2025-05-23 N/A 0.0 DobryCMS in versions 2.* and lower is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in szukaj parameter allows…
CVE-2024-13945 2025-05-23 MEDIUM 6.0 Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials become compromised. This issue affects ASPECT-Enterprise:…
CVE-2025-5096 2025-05-23 MEDIUM 6.4 The TablePress plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the 'data-caption', 'data-s-content-padding', 'data-s-title', and 'data-footer' data-attributes…
CVE-2025-47149 2025-05-23 MEDIUM 5.3 The optional feature 'Anti-Virus & Sandbox' of i-FILTER contains an issue with improper pattern file validation. If exploited, the product…
« Anterior Página 378 de 3518 Siguiente »