Media
CVE-2026-10833
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Sin evaluar
pysec-2026-232
Malicious code in ensmallen (PyPI)
Crítica
CVE-2026-56260
Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution
Alta
CVE-2026-56043
Customer Reviews for WooCommerce <= 5.110.1 - Unauthenticated Stored Cross-Site Scripting
Crítica
CVE-2026-12281
Shibboleth <= 2.5.3 - Unauthenticated Administrator Account Creation
Media
CVE-2026-56042
Advanced Order Export For WooCommerce <= 4.0.9 - Authenticated (Customer+) Stored Cross-Site Scripting
Alta
CVE-2026-56041
Responsive Lightbox & Gallery <= 2.7.6 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-12512
Quotes Llama <= 3.1.5 - Unauthenticated SQL Injection
Alta
CVE-2026-56040
Gutenverse Form – Contact Form Builder, Block Form & Booking Form <= 2.4.7 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-56046
ListingPro - WordPress Directory & Listing Theme <= 2.9.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2026-56052
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.5 - Authenticated (Administrator+) SQL Injection
Alta
CVE-2026-56071
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.53.1 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-11579
Kali Forms <= 2.4.16 - Missing Authorization to Unauthenticated Media File Upload
Alta
CVE-2026-56038
Frisbii Pay <= 1.8.2 - Authenticated (Contributor+) Privilege Escalation
Media
CVE-2026-56039
Quick Interest Slider <= 3.1.6 - Reflected Cross-Site Scripting
Media
CVE-2026-11580
Kali Forms <= 2.4.16 - Authenticated (Contributor+) Insecure Direct Object Reference to Post Metadata Disclosure
Alta
CVE-2026-54329
Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection
Baja
CVE-2026-55542
Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL
Baja
CVE-2026-55519
Snipe-IT has Improper Authorization in File Deletion (IDOR)
Media
CVE-2026-55483
Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation
Media
CVE-2026-55482
Snipe-IT has Multi-Tenancy Bypass via Bulk Asset Update
Media
CVE-2026-50550
Snipe-IT has a 2FA reset privilege bypass
Media
CVE-2026-49976
Snipe-IT Vulnerable to User Account Escalation via CSV Import
Media
ghsa-w2j7-f3c6-g8cw
Flask-Security has an Open Redirect issue
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.