Sin evaluar
CVE-2026-3210
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.068
Restablecer filtros
Media
CVE-2026-27621
TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File Upload
Crítica
CVE-2026-27593
Statamic is vulnerable to account takeover via password reset link injection
Media
CVE-2026-27461
Pimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clause
Media
CVE-2026-27129
Craft CMS: Cloud Metadata SSRF Protection Bypass via IPv6 Resolution
Media
CVE-2026-27128
Craft CMS Race condition in Token Service potentially allows for token usage greater than the token limit
Alta
CVE-2026-27127
Craft CMS has Cloud Metadata SSRF Protection Bypass via DNS Rebinding
Media
CVE-2026-27126
Craft CMS has Stored XSS in Table Field via "HTML" Column Type
Baja
CVE-2026-2897
funadmin: XSS through Value argument in Backend Interface component
Baja
CVE-2026-2898
funadmin: Deserialization Vulnerability in Backend Endpoint via AuthCloudService getMember Function
Media
CVE-2026-2896
funadmin has Incorrect Privilege Assignment in its Configuration Handler
Media
CVE-2026-2894
funadmin exposes sensitive information via getMember function
Baja
CVE-2026-2895
funadmin has Weak Password Recovery Mechanism for Forgotten Password
Media
CVE-2026-26047
Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits
Alta
CVE-2026-26045
Moodle has a Remote Code Execution risk via file restore
Media
CVE-2026-27568
AVideo has Stored Cross-Site Scripting via Markdown Comment Injection
Alta
CVE-2026-27206
Zumba Json Serializer has a potential PHP Object Injection via Unrestricted @type in unserialize()
Alta
CVE-2026-27198
Formwork Improperly Managed Privileges in User creation
Alta
CVE-2026-27196
Statamic affected by privilege escalation via stored cross-site scripting
Alta
CVE-2026-26990
LibreNMS has a Time-Based Blind SQL Injection in address-search.inc.php
Media
CVE-2026-26989
LibreNMS has a Stored XSS in Alert Rule
Alta
CVE-2026-26988
LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream.
Media
CVE-2026-27016
LibreNMS has a Stored XSS in Custom OID - unit parameter missing strip_tags()
Media
CVE-2026-26992
LibreNMS /port-groups name Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.