Alta
CVE-2026-41275
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 48
Restablecer filtros
Crítica
CVE-2026-41137
Flowise: Code Injection in CSVAgent leads to Authenticated RCE
Alta
CVE-2026-41138
Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using `Pandas`.
Media
CVE-2026-40175
Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
Media
CVE-2026-33916
Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection
Baja
CVE-2026-2391
qs's arrayLimit bypass in comma parsing allows denial of service
Baja
CVE-2026-23522
Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion
Alta
CVE-2026-22704
HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover
Alta
CVE-2025-65110
Vega XSS via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope
Media
CVE-2025-15284
qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion
Alta
CVE-2025-64496
Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events
Alta
CVE-2025-59831
`git-comiters` Command Injection vulnerability
Media
CVE-2025-54066
DiracX-Web is vulnerable to attack through an Open Redirect on its login page
Crítica
CVE-2024-47169
Agnai vulnerable to Remote Code Execution via JS Upload using Directory Traversal
Alta
CVE-2024-43414
Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries
Crítica
CVE-2024-38989
Prototype pollution in izatop bunt
Media
CVE-2024-38527
Cross-site Scripting in ZenUML
Media
CVE-2024-28863
Denial of service while parsing a tar file due to lack of folders count validation
Alta
CVE-2022-24999
qs vulnerable to Prototype Pollution
Alta
CVE-2017-16215
Directory Traversal in sgqserve
Alta
CVE-2020-4038
Reflected XSS in GraphQL Playground
Alta
CVE-2017-1000048
Prototype Pollution Protection Bypass in qs
Alta
CVE-2014-10064
Denial-of-Service Extended Event Loop Blocking in qs
Alta
CVE-2014-7191
Denial-of-Service Memory Exhaustion in qs
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.