Media
CVE-2026-7475
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2026-7650
E2Pdf – Export Pdf Tool for WordPress <= 1.32.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Baja
CVE-2026-8088
OSGeo GDAL vulnerable to out-of-bounds read
Baja
CVE-2026-8087
OSGeo GDAL vulnerable to heap-based buffer overflow
Alta
CVE-2026-7330
Auto Affiliate Links <= 6.8.8 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter
Alta
CVE-2026-5127
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2026-42879
FacturaScripts Vulnerable to Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images
Media
CVE-2026-42878
FacturaScripts Vulnerable to Unauthenticated phpinfo() Disclosure via Installer Endpoint
Media
CVE-2026-42877
FacturaScripts vulnerable to stored XSS via product reference in sales/purchases
Baja
CVE-2026-27964
FacturaScripts vulnerable to Reflected Cross-Site Scripting (XSS) via Cookie Manipulation
Media
CVE-2026-27892
FacturaScripts Vulnerable to Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download
Alta
CVE-2026-27891
FacturaScripts Vulnerable to Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism
Alta
CVE-2026-8086
A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads
Media
CVE-2026-8084
A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This
Alta
CVE-2026-44244
GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath
Alta
CVE-2026-44243
GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository
Alta
CVE-2026-42215
GitPython has Command Injection via Git options bypass
Alta
CVE-2026-42284
GitPython: Unsafe option check validates multi_options before shlex.split transformation
Crítica
CVE-2025-63704
query-parser-string is vulnerable to Prototype Pollution
Media
CVE-2026-36341
Webkul Krayin CRM is Vulnerable to Cross-Site Scripting in the /admin/activities/create endpoint
Crítica
CVE-2025-63703
parse-ini is vulnerable to Prototype Pollution in index.js()
Alta
CVE-2025-65122
youtube-regex vulnerable to Regex Denial of Service
Crítica
ghsa-54pg-9963-v8vg
Compromised version of intercom-client published to npm
Crítica
ghsa-gr3r-crp5-qrrm
Compromised tag of intercom-php published via GitHub
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.