Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

CVE ID Publicado Severidad CVSS Descripción
CVE-2025-7645 2025-07-22 HIGH 8.1 The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to arbitrary file…
CVE-2025-7644 2025-07-22 MEDIUM 6.4 The Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery…
CVE-2025-7495 2025-07-22 MEDIUM 6.4 The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpmem_login_link' shortcode in all…
CVE-2025-6585 2025-07-22 HIGH 8.1 The WP JobHunt plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including,…
CVE-2025-52580 2025-07-22 LOW 2.4 Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited,…
CVE-2025-7953 2025-07-22 LOW 3.5 A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS up to 5.202506.a. This issue affects some…
CVE-2025-7952 2025-07-22 MEDIUM 6.3 A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. This vulnerability affects the function ckeckKeepAlive of the file…
CVE-2025-7951 2025-07-22 LOW 3.5 A vulnerability classified as problematic has been found in code-projects Public Chat Room 1.0. This affects an unknown part of…
CVE-2025-7950 2025-07-22 HIGH 7.3 A vulnerability was found in code-projects Public Chat Room 1.0. It has been rated as critical. Affected by this issue…
CVE-2025-6831 2025-07-22 MEDIUM 6.4 The User Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's urcr_restrict shortcode in all versions…
CVE-2025-5240 2025-07-22 MEDIUM 6.4 The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter…
CVE-2015-10137 2025-07-22 CRITICAL 9.8 The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file…
CVE-2012-10020 2025-07-22 CRITICAL 9.8 The FoxyPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadify.php…
CVE-2025-7945 2025-07-22 HIGH 8.8 A vulnerability was found in D-Link DIR-513 up to 20190831. It has been declared as critical. This vulnerability affects the…
CVE-2025-7944 2025-07-21 MEDIUM 4.3 A vulnerability was found in PHPGurukul Taxi Stand Management System 1.0. It has been classified as problematic. This affects an…
CVE-2025-7943 2025-07-21 MEDIUM 4.3 A vulnerability was found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this issue is…
CVE-2025-7486 2025-07-21 MEDIUM 4.4 The Ebook Store plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Order Details in all versions up…
CVE-2025-7942 2025-07-21 LOW 3.5 A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this vulnerability…
CVE-2025-7941 2025-07-21 LOW 3.5 A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown…
CVE-2025-7940 2025-07-21 MEDIUM 5.3 A vulnerability was found in Genshin Albedo Cat House App 1.0.2 on Android. It has been declared as problematic. Affected…
CVE-2025-7939 2025-07-21 MEDIUM 6.3 A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0. It has been classified as critical. Affected is the function addGoods…
CVE-2025-54134 2025-07-21 N/A 0.0 HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.8 and below, the…
CVE-2025-54129 2025-07-21 MEDIUM 4.3 HAXiam is a packaging wrapper for HAXcms which allows anyone to spawn their own microsite management platform. In versions 11.0.4…
CVE-2025-54128 2025-07-21 N/A 0.0 HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.7 and below, the…
CVE-2025-54127 2025-07-21 N/A 0.0 HAXcms with nodejs backend allows users to start the server in any HAXsite or HAXcms instance. In versions 11.0.6 and…
CVE-2025-54122 2025-07-21 CRITICAL 10.0 Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery (SSRF) vulnerability has been identified in the proxy…
CVE-2025-53832 2025-07-21 HIGH 7.5 Lara Translate MCP Server is a Model Context Protocol (MCP) Server for Lara Translate API. Versions 0.0.11 and below contain…
CVE-2025-53528 2025-07-21 HIGH 7.6 Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions 5.4.3 and below, the version parameter of the…
CVE-2025-7938 2025-07-21 MEDIUM 4.3 A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0 and classified as critical. This issue affects the function updateGoods of…
CVE-2025-7936 2025-07-21 MEDIUM 6.3 A vulnerability has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a and classified as critical. Affected by this vulnerability is…
CVE-2025-7325 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7324 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7323 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7322 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7321 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7320 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7319 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7318 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7317 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7316 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7315 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7314 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7313 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7312 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7311 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7310 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7309 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7308 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7307 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-7306 2025-07-21 HIGH 7.8 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
« Anterior Página 82 de 3415 Siguiente »