Media
CVE-2026-27156
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.359
Restablecer filtros
Baja
CVE-2026-23983
Apache Superset allows authenticated users to view sensitive data without explicit permissions
Alta
CVE-2026-23984
Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections
Alta
CVE-2026-27483
MindsDB: Path Traversal in /api/files Leading to Remote Code Execution
Crítica
CVE-2026-26198
ormar is vulnerable to SQL Injection through aggregate functions min() and max()
Media
CVE-2026-27482
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Media
CVE-2026-27199
Werkzeug safe_join() allows Windows special device names
Baja
CVE-2026-27205
Flask session does not add `Vary: Cookie` header when accessed in some ways
Baja
ghsa-83pf-v6qq-pwmr
Fickling has a detection bypass via stdlib network-protocol constructors
Media
CVE-2026-25739
Indico Affected by Cross-Site-Scripting via material uploads
Media
CVE-2026-25738
Indico has Server-Side Request Forgery (SSRF) in multiple places
Media
CVE-2026-25527
changedetection.io is vulnerable to unauthenticated static path traversal
Crítica
CVE-2025-14009
NLTK has a Zip Slip Vulnerability
Alta
CVE-2026-2653
A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer ov
Alta
CVE-2026-25087
Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering
Media
CVE-2026-2415
Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name}
Media
CVE-2019-25338
DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames t
Crítica
CVE-2026-26217
Crawl4AI Has Local File Inclusion in Docker API via file:// URLs
Crítica
CVE-2026-26216
Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter
Alta
CVE-2026-26007
cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
Crítica
CVE-2026-21531
Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
Media
CVE-2026-25528
LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
Media
CVE-2026-25480
Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)
Media
CVE-2026-25479
Litestar's AllowedHosts has a validation bypass due to unescaped regex metacharacters in configured host patterns
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.