Media
CVE-2023-22298
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.855
Restablecer filtros
Media
CVE-2019-25091
nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag
Alta
CVE-2022-38060
OpenStack Kolla sudo privilege escalation vulnerability
Media
CVE-2022-4728
Graphite Web Cross-site Scripting vulnerability
Media
CVE-2022-4396
pyRdfa3 Cross-site Scripting vulnerability
Media
CVE-2022-4589
Terms and Conditions Module vulnerable to Open Redirect
Media
CVE-2021-4287
binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
Alta
CVE-2022-4223
pgadmin4 vulnerable to Code Injection
Media
CVE-2022-4105
Cross-site Scripting in kiwitcms
Media
CVE-2022-42965
snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)
Alta
CVE-2022-33684
Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack
Alta
CVE-2022-41547
MobSF allows attackers to read arbitrary files via a crafted HTTP request
Alta
CVE-2022-39254
When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
Media
CVE-2022-3102
jwcrypto token substitution can lead to authentication bypass
Media
CVE-2022-3355
Inventree vulnerable to Stored Cross-site Scripting
Media
CVE-2022-39348
Twisted vulnerable to NameVirtualHost Host header injection
Alta
CVE-2022-3697
Ansible leaks password to logs
Media
CVE-2021-23385
Flask-Security vulnerable to Open Redirect
Media
CVE-2022-3644
Plaintext storage of tokens in pulp_ansible
Alta
CVE-2022-1941
protobuf-cpp and protobuf-python have potential Denial of Service issue
Alta
CVE-2022-42906
Powerline Gitstatus vulnerable to arbitrary code execution
Alta
CVE-2026-57573
Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)
Crítica
CVE-2026-57572
Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args
Alta
CVE-2026-55574
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.