Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

CVE ID Publicado Severidad CVSS Descripción
CVE-2025-8373 2025-07-31 HIGH 7.3 A vulnerability was found in code-projects Vehicle Management 1.0. It has been classified as critical. This affects an unknown part…
CVE-2025-8372 2025-07-31 HIGH 7.3 A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some…
CVE-2025-7205 2025-07-31 MEDIUM 5.4 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the donor…
CVE-2025-54757 2025-07-31 MEDIUM 6.5 Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malicious file uploaded by…
CVE-2025-54752 2025-07-31 MEDIUM 6.5 Multiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product user creates a malformed entry…
CVE-2025-46359 2025-07-31 HIGH 7.2 A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A product administrator may execute…
CVE-2025-41396 2025-07-31 MEDIUM 5.4 A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by…
CVE-2025-41391 2025-07-31 MEDIUM 5.4 Stored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product user accesses a malicious page, an arbitrary…
CVE-2025-36563 2025-07-31 MEDIUM 6.1 Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator accesses a crafted URL, an arbitrary…
CVE-2025-8371 2025-07-31 HIGH 7.3 A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is…
CVE-2025-8370 2025-07-31 MEDIUM 4.3 A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9. Affected is an unknown function of the…
CVE-2025-8369 2025-07-31 MEDIUM 4.3 A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9. This issue affects some unknown processing…
CVE-2025-8368 2025-07-31 MEDIUM 4.3 A vulnerability classified as problematic was found in Portabilis i-Educar 2.9. This vulnerability affects unknown code of the file /intranet/pesquisa_pessoa_lst.php.…
CVE-2025-53558 2025-07-31 HIGH 8.8 ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge of the…
CVE-2025-8367 2025-07-31 MEDIUM 4.3 A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the file…
CVE-2025-8366 2025-07-31 MEDIUM 4.3 A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some…
CVE-2025-7847 2025-07-31 HIGH 8.8 The AI Engine plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…
CVE-2025-5720 2025-07-31 MEDIUM 6.4 The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author’ parameter in all…
CVE-2025-8365 2025-07-31 LOW 3.5 A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an…
CVE-2025-8348 2025-07-31 HIGH 7.3 A vulnerability has been found in Kehua Charging Pile Cloud Platform 1.0 and classified as critical. This vulnerability affects unknown…
CVE-2025-8347 2025-07-31 MEDIUM 6.3 A vulnerability, which was classified as critical, was found in Kehua Charging Pile Cloud Platform 1.0. This affects an unknown…
CVE-2025-8346 2025-07-31 MEDIUM 4.3 A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some…
CVE-2025-8345 2025-07-31 MEDIUM 6.3 A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this…
CVE-2025-8344 2025-07-31 MEDIUM 6.3 A vulnerability classified as critical has been found in openviglet shio up to 0.3.8. Affected is the function shStaticFileUpload of…
CVE-2025-8343 2025-07-31 MEDIUM 4.3 A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the…
CVE-2025-8340 2025-07-31 MEDIUM 4.3 A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability affects…
CVE-2025-8339 2025-07-31 HIGH 7.3 A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an…
CVE-2025-8338 2025-07-31 HIGH 7.3 A vulnerability was found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this issue is some…
CVE-2025-54085 2025-07-31 N/A 0.0 CVE-2025-54085 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access…
CVE-2025-49084 2025-07-31 N/A 0.0 CVE-2025-49084 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access…
CVE-2025-49083 2025-07-31 N/A 0.0 CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56.…
CVE-2025-49082 2025-07-31 N/A 0.0 CVE-2025-49082 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access…
CVE-2025-36040 2025-07-31 MEDIUM 6.5 IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of…
CVE-2025-36039 2025-07-31 MEDIUM 6.5 IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of…
CVE-2025-8337 2025-07-30 LOW 2.4 A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects…
CVE-2025-8336 2025-07-30 HIGH 7.3 A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of…
CVE-2025-8335 2025-07-30 MEDIUM 4.3 A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part.…
CVE-2025-8334 2025-07-30 HIGH 7.3 A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this…
CVE-2025-54586 2025-07-30 HIGH 7.1 GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and below, attackers can…
CVE-2025-8333 2025-07-30 HIGH 7.3 A vulnerability was found in code-projects Online Farm System 1.0. It has been declared as critical. Affected by this vulnerability…
CVE-2025-8332 2025-07-30 HIGH 7.3 A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown…
CVE-2025-54585 2025-07-30 N/A 0.0 GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and below, attackers can…
CVE-2025-8331 2025-07-30 HIGH 7.3 A vulnerability was found in code-projects Online Farm System 1.0 and classified as critical. This issue affects some unknown processing…
CVE-2025-8330 2025-07-30 HIGH 7.3 A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. This vulnerability affects unknown code of…
CVE-2025-54584 2025-07-30 N/A 0.0 GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). In versions 1.19.1 and below,…
CVE-2025-54583 2025-07-30 N/A 0.0 GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). Versions 1.19.1 and below allow…
CVE-2025-54581 2025-07-30 HIGH 7.5 vproxy is an HTTP/HTTPS/SOCKS5 proxy server. In versions 2.3.3 and below, untrusted data is extracted from the user-controlled HTTP Proxy-Authorization…
CVE-2025-54576 2025-07-30 CRITICAL 9.1 OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into…
CVE-2025-54575 2025-07-30 MEDIUM 5.3 ImageSharp is a 2D graphics library. In versions below 2.1.11 and 3.0.0 through 3.1.10, a specially crafted GIF file containing…
CVE-2025-53022 2025-07-30 HIGH 8.6 TrustedFirmware-M (aka Trusted Firmware for M profile Arm CPUs) before 2.1.3 and 2.2.x before 2.2.1 lacks length validation during a…