Media
CVE-2026-70602
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.501
Restablecer filtros
Media
CVE-2026-70603
Electron: shell.openPath path validation bypass via embedded null byte
Alta
CVE-2026-70601
Electron: Context isolation bypass via Function.prototype.bind hijack
Baja
CVE-2026-70600
Electron: Cross-origin iframe can position native autofill popup
Media
CVE-2026-70599
Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin
Baja
CVE-2026-70598
Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
Media
CVE-2026-70597
Electron: Parent process code-sign check is spoofable
Media
CVE-2026-53949
Ghost Content API filter bypass reveals private fields
Media
CVE-2026-70596
Ghost: Cross-Site Scripting in Feature Image Captions
Media
CVE-2026-70595
Ghost: Server-Side Request Forgery Mitigation Issue
Media
CVE-2026-59817
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
Media
CVE-2026-53947
Ghost: Member existence leak via magic link sign-in response
Alta
CVE-2026-53950
XSS in Ghost's ActivityPub client
Media
CVE-2026-70594
Ghost: Session Fixation in Ghost Admin
Media
CVE-2026-70593
Ghost: Theme Upload Path Traversal
Media
CVE-2026-70592
Ghost: Database Backup Path Traversal
Media
CVE-2026-70591
Ghost: Server-Side Request Forgery in Image Fetching
Media
CVE-2026-70590
Ghost: Blind Password Hash Disclosure in Ghost Admin API
Media
CVE-2026-53946
Ghost: Mobiledoc image-size fetch SSRF
Media
CVE-2026-53945
Ghost: Server-side request forgery via DNS rebinding in external request handling
Media
CVE-2026-53944
Ghost: Private IP filtering bypass to make server-side requests to internal services
Media
CVE-2026-70589
Ghost: Archived Offers can be Redeemed
Media
CVE-2026-53948
Ghost: File Upload Content-Type Spoofing
Media
CVE-2026-70588
Ghost: Cross-Site Scripting in Universal Import
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.