Media
CVE-2026-55163
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.319
Restablecer filtros
Media
CVE-2026-55165
Lemur: JWT verifier honors attacker-supplied alg, enabling ATO
Media
CVE-2026-55162
Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF
Media
CVE-2026-55164
Lemur user-update path stores plaintext passwords
Alta
CVE-2026-48813
Flawfinder output manipulation via untrusted filenames and source text
Media
CVE-2026-35163
OctoPrint has XSS in its Suppressed Command Notifications
Media
CVE-2026-55863
motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution
Alta
CVE-2026-55488
motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read
Alta
CVE-2026-53925
Glances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration
Alta
CVE-2026-54134
OctoPrint has possible file exfiltration via query parameters on upload endpoints
Media
CVE-2026-31978
motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint
Media
CVE-2026-32315
motionEye's World-Readable Configuration File Exposes Admin Password Hash
Alta
CVE-2025-67303
ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)
Media
CVE-2026-55206
py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()
Media
CVE-2026-46611
Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack
Alta
CVE-2026-46607
Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution
Alta
CVE-2026-46606
Glances is Vulnerable to Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py
Media
CVE-2026-55837
dbt MCP Server: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens
Alta
CVE-2026-46608
Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)
Alta
CVE-2026-23879
py7zr: Arbitrary File Write Vulnerability
Alta
CVE-2026-54528
jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories
Alta
CVE-2026-54695
Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID
Media
CVE-2026-12565
BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284
Alta
CVE-2026-54008
Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.