Media
CVE-2021-3654
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Media
CVE-2022-0869
Open Redirect in django-spirit
Alta
CVE-2021-41499
Classic Buffer Overflow in pyo
Alta
CVE-2021-44227
Cross Site Request Forgery in mailman
Alta
CVE-2021-37941
APM Java Agent Local Privilege Escalation
Alta
CVE-2021-4164
calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)
Media
CVE-2021-4170
calibre-web is vulnerable to Cross-site Scripting
Media
CVE-2021-41867
Information disclosure vulnerability in OnionShare
Baja
CVE-2017-8761
Temporary urls leaked via logging
Media
CVE-2020-7964
Missing Authentication for Critical Function in Saleor
Media
CVE-2020-13258
Cross-site scripting in Contentful
Media
CVE-2018-13796
Moderate severity vulnerability that affects mailman
Media
CVE-2020-26243
Memory leak in Nanopb
Media
CVE-2010-1104
Moderate severity vulnerability that affects Zope2
Media
CVE-2026-12920
Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter
Alta
CVE-2026-14327
AR for WordPress <= 8.40 - Unauthenticated Arbitrary File Read via 'file' Parameter
Media
CVE-2026-12154
Reviews Widgets for Google, Yelp & TripAdvisor <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_id' Shortcode Attribute
Media
CVE-2026-12734
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'connectorWidth' Block Attribute
Media
CVE-2026-12729
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Data Migration via wedocs_migrate_betterdocs_to_wedocs AJAX Action
Media
CVE-2026-12731
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTitleTag' Block Attributes
Alta
CVE-2026-8147
MLflow: trace API endpoints lack proper authorization validators
Alta
CVE-2026-7311
TinyPNG <= 3.6.13 - Authenticated (Author+) Arbitrary File Deletion via 'convert.path' in 'tiny_compress_images' Post Meta
Media
CVE-2026-9577
Post Status Notifier Lite <= 1.12.0 - Reflected Cross-Site Scripting
Media
CVE-2026-57759
ProfileGrid – User Profiles, Groups and Communities <= 6.0.0.2 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.