Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

Borrar filtros
CVE ID Publicado Severidad CVSS Descripción
CVE-2025-54597 2025-07-27 HIGH 7.2 LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.
CVE-2025-6241 2025-07-27 N/A 0.0 LsiAgent.exe, a component of SysTrack from Lakeside Software, attempts to load several DLL files which are not present in the default installation. If a user-writable directory is present…
CVE-2025-8211 2025-07-26 LOW 3.5 A vulnerability was found in Roothub up to 2.6. It has been declared as problematic. Affected by this vulnerability is the function Edit of the file src/main/java/cn/roothub/web/admin/SystemConfigAdminController.java. The…
CVE-2025-8210 2025-07-26 MEDIUM 5.3 A vulnerability was found in Yeelink Yeelight App up to 3.5.4 on Android. It has been classified as problematic. Affected is an unknown function of the file AndroidManifest.xml…
CVE-2025-8207 2025-07-26 MEDIUM 5.3 A vulnerability was found in Canara ai1 Mobile Banking App 3.6.23 on Android and classified as problematic. This issue affects some unknown processing of the file AndroidManifest.xml of…
CVE-2025-8206 2025-07-26 LOW 3.1 A vulnerability, which was classified as problematic, was found in Comodo Dragon up to 134.0.6998.179. This affects an unknown part of the component IP DNS Leakage Detector. The…
CVE-2025-8205 2025-07-26 LOW 3.7 A vulnerability, which was classified as problematic, has been found in Comodo Dragon up to 134.0.6998.179. Affected by this issue is some unknown functionality of the component IP…
CVE-2025-8204 2025-07-26 LOW 3.1 A vulnerability classified as problematic was found in Comodo Dragon up to 134.0.6998.179. Affected by this vulnerability is an unknown functionality of the component HSTS Handler. The manipulation…
CVE-2025-8203 2025-07-26 MEDIUM 6.3 A vulnerability classified as critical has been found in Jingmen Zeyou Large File Upload Control up to 6.3. Affected is an unknown function of the file /index.jsp. The…
CVE-2025-8191 2025-07-26 LOW 3.5 A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-ui/index.html of the component Swagger…
CVE-2025-8190 2025-07-26 MEDIUM 6.3 A vulnerability, which was classified as critical, has been found in Campcodes Courier Management System 1.0. This issue affects some unknown processing of the file /print_pdets.php. The manipulation…
CVE-2025-8189 2025-07-26 MEDIUM 6.3 A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /edit_user.php. The manipulation of the argument ID…
CVE-2025-8188 2025-07-26 MEDIUM 6.3 A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /edit_staff.php. The manipulation of the argument…
CVE-2025-8187 2025-07-26 MEDIUM 6.3 A vulnerability was found in Campcodes Courier Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /edit_parcel.php.…
CVE-2025-8186 2025-07-26 MEDIUM 6.3 A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edit_branch.php.…
CVE-2025-8185 2025-07-26 HIGH 7.3 A vulnerability was found in 1000 Projects ABC Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /getbyid.php. The…
CVE-2025-8184 2025-07-26 HIGH 8.8 A vulnerability was found in D-Link DIR-513 up to 1.10 and classified as critical. This issue affects the function formSetWanL2TPcallback of the file /goform/formSetWanL2TPtriggers of the component HTTP…
CVE-2025-8182 2025-07-26 MEDIUM 5.6 A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic. This vulnerability affects unknown code of the file /etc_ro/smb.conf of the component Samba. The manipulation…
CVE-2025-6991 2025-07-26 HIGH 7.5 The kallyas theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.21.0 via the 'TH_LatestPosts4` widget. This makes it possible for…
CVE-2025-6989 2025-07-26 HIGH 8.1 The Kallyas theme for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the delete_font() function in all versions up to, and including,…
CVE-2025-5529 2025-07-26 MEDIUM 6.4 The Educenter theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Circle Counter Block in all versions up to, and including, 1.6.2 due to insufficient input…
CVE-2025-8181 2025-07-26 HIGH 7.2 A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the component FTP…
CVE-2025-8180 2025-07-26 HIGH 8.8 A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formdeleteUserName of the file /goform/deleteUserName. The manipulation…
CVE-2025-8097 2025-07-26 MEDIUM 5.3 The WoodMart theme for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 8.2.6. This is due to insufficient validation of the qty…
CVE-2025-7501 2025-07-26 MEDIUM 6.4 The Wonder Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image title and description DOM in all versions up to, and including, 14.4 due…
CVE-2025-6987 2025-07-26 MEDIUM 6.4 The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanced_iframe' shortcode in all versions up to, and including, 2025.5 due to insufficient…
CVE-2025-8198 2025-07-26 HIGH 7.5 The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.9.0. This is due…
CVE-2025-8179 2025-07-26 HIGH 7.3 A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/changeimage.php.…
CVE-2025-8178 2025-07-26 HIGH 8.8 A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /goform/RequestsProcessLaid. The manipulation of the argument device1D leads…
CVE-2025-6895 2025-07-26 CRITICAL 9.8 The Melapress Login Security plugin for WordPress is vulnerable to Authentication Bypass due to missing authorization within the get_valid_user_based_on_token() function in versions 2.1.0 to 2.1.1. This makes it…
CVE-2025-8177 2025-07-26 MEDIUM 5.3 A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads…
CVE-2025-8176 2025-07-26 MEDIUM 5.3 A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads…
CVE-2025-8103 2025-07-26 MEDIUM 4.3 The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.7. This is due to missing nonce…
CVE-2025-54416 2025-07-26 CRITICAL 9.1 tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability…
CVE-2025-54415 2025-07-26 N/A 0.0 dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files. In versions 0.23.0a8 and below, a high-severity vulnerability has been identified in the cicd.yml…
CVE-2025-54414 2025-07-26 N/A 0.0 Anubis is a Web AI Firewall Utility that weighs the soul of users' connections using one or more challenges in order to protect upstream resources from scraper bots.…
CVE-2025-54413 2025-07-26 N/A 0.0 skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain an inconsistency in MethodNode, which can be exploited…
CVE-2025-54412 2025-07-26 N/A 0.0 skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the OperatorFuncNode which can be…
CVE-2025-54385 2025-07-26 N/A 0.0 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions between 17.0.0-rc1 to 17.2.2 and versions 16.10.5 and below,…
CVE-2025-54380 2025-07-26 MEDIUM 6.5 Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to version 17.6, Opencast would incorrectly send the hashed global system…
CVE-2025-54378 2025-07-26 HIGH 8.3 HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends. In versions 11.0.13 and below of haxcms-nodejs and versions 11.0.8 and below of haxcms-php,…
CVE-2025-54366 2025-07-26 N/A 0.0 FreeScout is a lightweight free open source help desk and shared inbox built with PHP (Laravel framework). In versions 1.8.185 and below, there is a critical deserialization vulnerability…
CVE-2025-50185 2025-07-26 N/A 0.0 DbGate is cross-platform database manager. In versions 6.6.0 and below, DbGate allows unauthorized file access due to insufficient validation of file paths and types. A user with application-level…
CVE-2025-50184 2025-07-26 N/A 0.0 DbGate is cross-platform database manager. In versions 6.4.3-premium-beta.5 and below, DbGate is vulnerable to a directory traversal flaw. The file parameter is not properly restricted to the intended…
CVE-2024-13507 2025-07-26 HIGH 7.5 The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to time-based SQL Injection via the dist parameter in all versions up…
CVE-2025-8175 2025-07-26 MEDIUM 6.5 A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usb_paswd.asp of the component jhttpd. The…
CVE-2025-8174 2025-07-26 MEDIUM 6.3 A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/candidates_add.php. The manipulation of…
CVE-2023-2274 2025-07-26 N/A 0.0 Rejected reason: This CVE assignment was considered invalid after investigation.
CVE-2025-8173 2025-07-25 HIGH 7.3 A vulnerability has been found in 1000 Projects ABC Courier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file…
CVE-2025-8172 2025-07-25 MEDIUM 6.3 A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the…
« Anterior Página 961 de 4306 Siguiente »