Media
CVE-2026-34244
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41
Restablecer filtros
Media
CVE-2026-33440
Weblate: Authenticated SSRF via redirect bypass of ALLOWED_ASSET_DOMAINS in screenshot URL uploads
Alta
CVE-2026-33435
Weblate: Remote code execution during backup restoration
Media
CVE-2026-33220
Weblate: JavaScript localization CDN add-on allows arbitrary local file read outside the repository
Media
CVE-2026-33214
Weblate: Improper access control for the translation memory in API
Baja
CVE-2026-33212
Weblate: Improper access control for pending tasks in API
Media
CVE-2026-27457
Weblate: Missing access control for the AddonViewSet API exposes all addon configurations
Media
CVE-2026-24126
Weblate has an argument injection in management console
Crítica
CVE-2025-68398
Weblate is vulnerable to RCE through Git config file overwrite
Media
CVE-2025-67715
Weblate has Systematic User and Project Enumeration via Broken Authorization in REST API (IDOR)
Media
CVE-2025-67492
Weblate's over‑permissive webhook endpoint enables mass repository updates and component enumeration
Media
CVE-2025-66407
Weblate has a Server-Side Request Forgery issue
Baja
CVE-2025-64326
Weblate leaks the IP of project member inviting user to be reviewer in Audit log
Media
CVE-2025-61587
Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECT_DOMAINS is
Alta
CVE-2025-32021
Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing component that has a source code repository URL specified in settings, this URL is inclu
Media
CVE-2017-5537
The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user
Media
CVE-2022-24710
Cross-site Scripting in Weblate
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.