Media
CVE-2026-29780
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.319
Restablecer filtros
Alta
CVE-2026-29065
changedetection.io has Zip Slip vulnerability in the backup restore functionality
Media
CVE-2026-29038
changedetection.io has Reflected XSS in its RSS Tag Error Response
Alta
CVE-2026-29039
changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()
Alta
CVE-2026-28438
CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements
Alta
CVE-2026-28681
IRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links
Alta
ghsa-5r2p-pjr8-7fh7
SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality
Alta
CVE-2026-30244
Plane is Vulnerable to Unauthenticated Workspace Member Information Disclosure
Crítica
CVE-2026-3490
PickleScan's pkgutil.resolve_name has a universal blocklist bypass
Media
CVE-2026-28415
Gradio has an Open Redirect in its OAuth Flow
Baja
CVE-2026-27167
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
Media
CVE-2026-28352
Indico has a missing access check in the event series management API
Crítica
CVE-2026-27941
OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out a
Media
ghsa-mhc9-48gj-9gp3
Fickling has safety check bypass via REDUCE+BUILD opcode sequence
Media
CVE-2026-27645
changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response
Alta
CVE-2026-27696
changedetection.io is Vulnerable to SSRF via Watch URLs
Alta
ghsa-mxhj-88fx-4pcv
Fickling: OBJ opcode call invisibility bypasses all safety checks
Alta
CVE-2026-27483
MindsDB: Path Traversal in /api/files Leading to Remote Code Execution
Crítica
CVE-2026-26198
ormar is vulnerable to SQL Injection through aggregate functions min() and max()
Media
CVE-2026-27482
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Baja
ghsa-83pf-v6qq-pwmr
Fickling has a detection bypass via stdlib network-protocol constructors
Media
CVE-2026-25738
Indico has Server-Side Request Forgery (SSRF) in multiple places
Media
CVE-2026-25527
changedetection.io is vulnerable to unauthenticated static path traversal
Alta
CVE-2026-25087
Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.