Alta
CVE-2026-33485
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 620
Restablecer filtros
Alta
CVE-2026-33483
AVideo Affected by Unauthenticated Disk Space Exhaustion via Unlimited Temp File Creation in aVideoEncoderChunk.json.php
Alta
CVE-2026-33482
AVideo has an OS Command Injection via $() Shell Substitution Bypass in sanitizeFFmpegCommand()
Crítica
CVE-2026-33351
AVideo has Unauthenticated SSRF via `webSiteRootURL` Parameter in saveDVR.json.php, Chaining to Verification Bypass
Baja
CVE-2026-33296
AVideo has an Open Redirect via Unvalidated redirectUri in userLogin.php
Alta
CVE-2026-33295
AVideo Affected by Stored XSS via Unescaped Video Title in CDN downloadButtons.php
Alta
CVE-2026-33293
AVideo Affected by Arbitrary File Deletion via Path Traversal in CloneSite deleteDump Parameter
Media
CVE-2026-33051
Craft CMS Vulnerable to Stored XSS in Revision Context Menu
Media
CVE-2026-33035
Unauthenticated Reflected XSS via innerHTML in AVideo
Alta
CVE-2026-32813
Admidio has a Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)
Media
CVE-2026-32757
Admidio has an HTMLPurifier Bypass in eCard Message Allows HTML Email Injection
Crítica
CVE-2026-32817
Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion
Media
CVE-2026-32812
Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpoint
Alta
CVE-2026-31887
Shopware: Unauthenticated data extraction possible through store-api.order endpoint
Media
CVE-2026-31859
CraftCMS vulnerable to reflective XSS via incomplete return URL sanitization
Media
CVE-2026-31822
Sylius has a XSS vulnerability in checkout login form
Baja
CVE-2026-29177
Craft Commerce has stored XSS in Craft Commerce Order Details Slideout
Media
CVE-2026-29176
Craft Commerce has stored XSS in Inventory Location Name
Alta
CVE-2026-29174
Craft Commerce is vulnerable to SQL Injection in Commerce Inventory Table Sorting
Media
ghsa-qrfh-cc86-vc8c
Leantime has HTML injection through firstname and lastname fields
Media
CVE-2026-3241
Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability
Media
CVE-2026-28784
Craft CMS has potential authenticated Remote Code Execution via Twig SSTI
Media
CVE-2026-28783
Craft CMS has Twig Function Blocklist Bypass
Crítica
CVE-2026-28697
Craft CMS Vulnerable to Authenticated RCE via "craft.app.fs.write()" in Twig Templates
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.