Alta
CVE-2026-44741
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 423
Restablecer filtros
Alta
CVE-2026-44177
Kirby CMS has pre-authentication path traversal and PHP file inclusion during user lookup
Crítica
CVE-2018-25357
Dolibarr ERP CRM contains a remote code evaluation vulnerability
Media
CVE-2026-8245
Concrete CMS is Vulnerable to Reflected XSS in Legacy Pagination
Alta
CVE-2026-8197
Concrete CMS is vulnerable to Stored XSS via OAuth integration name
Baja
CVE-2026-46637
Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`
Alta
CVE-2026-35671
phpMyFAQ: IDOR Account Takeover
Alta
CVE-2026-31069
BillaBear is Vulnerable to SQL Injection in the EventRepository
Media
CVE-2026-46337
AVideo: Unauthenticated Arbitrary Image Read via Path Traversal in `view/img/image404Raw.php`
Alta
CVE-2026-45793
Github Actions issued GITHUB_TOKEN disclosure in GitHub Actions logs
Media
CVE-2026-45731
AVideo: Authenticated Arbitrary File Read in view/update.php
Alta
CVE-2026-45270
CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule
Media
CVE-2026-45139
CI4MS Fileeditor allows deletion and rename of critical application files due to missing extension allowlist on destructive operations
Media
CVE-2026-45138
CI4MS: Stored XSS in Blog Content via Broken `html_purify` Validation Rule
Alta
CVE-2026-45578
AVideo: OS command injection in on_publish.php execAsync via unescaped m3u8 URL
Media
CVE-2026-23695
Cockpit CMS: Stored cross-site scripting vulnerability in the Set field type's Display template option
Alta
CVE-2026-39850
Yii 2: Local file inclusion via view parameter name collision
Media
CVE-2026-27892
FacturaScripts Vulnerable to Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download
Alta
CVE-2026-42552
Flight vulnerable to sensitive information disclosure via default error handler
Alta
CVE-2026-42550
Flight vulnerable to SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete
Media
CVE-2026-42549
Flight has path traversal in `make:controller` CLI that creates arbitrary directories outside project root
Crítica
CVE-2026-46364
phpMyFAQ has unauthenticated SQL injection via User-Agent header in BuiltinCaptcha
Alta
CVE-2026-46359
phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields
Media
CVE-2026-46361
phpMyFAQ has stored XSS via | raw Filter in search.twig — html_entity_decode(strip_tags()) Bypass in Search Result Rendering
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.