Media
CVE-2025-66236
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.861
Restablecer filtros
Crítica
CVE-2026-4810
Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability
Media
CVE-2026-1116
A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in parisneo/lollms prior to version 2.2.0. The vulnerability arises from the lack of
Crítica
CVE-2026-5059
aws-mcp has a Command Injection Remote Code Execution Vulnerability
Media
ghsa-55v6-g8pm-pw4c
rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration
Crítica
CVE-2026-40258
gramps-webapi: Zip Slip Path Traversal in Media Archive Import
Media
CVE-2026-39921
GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outboun
Media
CVE-2026-39922
GeoNode contains a server-side request forgery vulnerability in the service registration endpoint
Media
ghsa-vj8v-p5vw-m6v5
xrootd has path traversal in directory listing that allows access to the parent directory via trailing ".." pattern
Alta
CVE-2026-40177
ajenti.plugin.core has password bypass when 2FA is activated
Baja
CVE-2026-114110
uv vulnerable to arbitrary file deletion through RECORD entries
Crítica
CVE-2026-40289
PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions
Crítica
CVE-2026-40288
PraisonAI has critical RCE via `type: job` workflow YAML
Alta
CVE-2026-40287
PraisonAI Vulnerable to RCE via Automatic tools.py Import
Media
CVE-2026-56074
PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands
Alta
ghsa-x462-jjpc-q4q4
PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint
Crítica
CVE-2026-40157
PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack`
Crítica
CVE-2026-40154
PraisonAI Vulnerable Untrusted Remote Template Code Execution
Alta
CVE-2026-56075
PraisonAI: Hardcoded `approval_mode="auto"` in Chainlit UI Overrides Administrator Configuration, Enabling Unapproved Shell Command Execution
Crítica
CVE-2026-40111
PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)
Media
CVE-2026-5388
justhtml includes multiple security fixes
Media
CVE-2026-40086
Rembg has a Path Traversal via Custom Model Loading
Crítica
CVE-2026-1115
parisneo/lollms vulnerable to stored XSS in the social feature
Media
CVE-2026-33551
An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.