Media
CVE-2026-46362
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 88
Restablecer filtros
Alta
CVE-2026-43873
AVideo: Unauthenticated Disclosure of CloneSite `myKey` via Error Echo in `cloneClient.json.php` Enables Cross-Site DB Dump of the Configured Clone Server
Baja
CVE-2026-41663
Admidio has CSRF on Admin Preferences that Triggers Unauthorized Backup, .htaccess Write, and Email Send
Media
CVE-2026-41658
Admidio's Missing Authorization on Inventory Module Destructive Endpoints Allows Any Authenticated User to Delete Items
Crítica
CVE-2026-41203
CI4MS Theme::upload is vulnerable to Zip Slip leading to RCE
Crítica
CVE-2026-41202
CI4MS Backup::restore is vulnerable to Zip Slip leading to RCE
Media
CVE-2026-41201
CI4MS: Backup Management Full Account Takeover for All Roles & Privilege Escalation via Stored DOM Blind XSS
Alta
CVE-2026-39393
CI4MS Vulnerable to Post-Installation Re-entry via Cache-Dependent Install Guard Bypass
Crítica
CVE-2026-34563
CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS
Crítica
CVE-2026-34560
CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS
Alta
CVE-2025-32957
baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE)
Media
CVE-2026-34036
Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php
Crítica
CVE-2026-33867
AVideo has Plaintext Video Password Storage
Alta
CVE-2026-33293
AVideo Affected by Arbitrary File Deletion via Path Traversal in CloneSite deleteDump Parameter
Media
CVE-2026-33238
AVideo has a Path Traversal in listFiles.json.php Enables Server Filesystem Enumeration
Media
CVE-2026-33041
AVideo has an Unauthenticated Password Hash Oracle via encryptPass.json.php
Media
CVE-2026-32818
Admidio is Missing Authorization on Forum Topic and Post Deletion
Crítica
CVE-2026-32817
Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion
Alta
CVE-2026-26045
Moodle has a Remote Code Execution risk via file restore
Media
CVE-2026-25483
Craft Commerce has Stored XSS via Order Status Message with potential database exfiltration
Media
CVE-2026-23476
FacturaScripts is Vulnerable to Reflected XSS
Media
CVE-2026-24421
phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)
Media
CVE-2025-69198
Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted
Alta
CVE-2026-21857
Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.