Media
CVE-2026-22242
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 853
Restablecer filtros
Alta
CVE-2025-68954
Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced
Alta
CVE-2026-21857
Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read
Media
CVE-2025-68437
Craft CMS vulnerable to Server-Side Request Forgery (SSRF) via GraphQL Asset Upload Mutation
Alta
CVE-2026-21447
Bagisto has IDOR in Customer Order Reorder Functionality
Alta
CVE-2026-21446
Bagisto Missing Authentication on Installer API Endpoints
Alta
CVE-2025-66295
Grav vulnerable to Path traversal / arbitrary YAML write via user creation leading to Account Takeover / System Corruption
Media
CVE-2025-66306
Grav vulnerable to Information Disclosure via IDOR in Grav Admin Panel
Media
CVE-2025-66307
Grav Admin Plugin vulnerable to User Enumeration & Email Disclosure
Baja
CVE-2025-64711
PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users
Media
CVE-2025-64714
PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
Alta
CVE-2025-64500
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
Alta
CVE-2025-64519
TorrentPier is Vulnerable to Authenticated SQL Injection through Moderator Control Panel's topic_id parameter
Media
ghsa-27c9-vp3w-6ww8
Shopware exposes sensitive user information via CSV export mapping
Baja
ghsa-3cpp-fv95-mpr5
Shopware vulnerable to Server-Side Request Forgery (SSRF) – order invoice
Media
CVE-2025-62508
Citizen vulnerable to stored XSS in sticky header button messages
Media
CVE-2025-62418
bagisto has a Cross Site Scripting (XSS) vulnerability in TinyMCE Image Upload (SVG)
Baja
CVE-2025-62412
LibreNMS alert-rules has a Cross-Site Scripting Vulnerability
Baja
CVE-2025-61924
PrestaShop Checkout Target PayPal merchant account hijacking from backoffice
Media
CVE-2025-62415
bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)
Media
CVE-2025-61183
VaahCMS is vulnerable to XSS through its Avatar Upload endpoint
Alta
CVE-2025-59943
phpMyFAQ duplicate email registration allows multiple accounts with the same email
Alta
CVE-2025-59839
Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes
Media
CVE-2025-51586
Presta Shop vulnerable to email enumeration
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.