Media
CVE-2026-41129
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2026-41128
Craft CMS has a Missing Authorization Check on User Group Removal via save-permissions Action
Baja
ghsa-fcpv-w245-r2q7
DotNetNuke.Core security code analysis rules triggered
Baja
CVE-2026-56365
ImageMagick has a memory leak in PNG encoder when writing a MNG image
Baja
CVE-2026-56370
ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts
Baja
CVE-2026-56372
ImageMagick has a heap buffer overflow read in magnify operation via unrecognized magnify:method value
Media
ghsa-98cp-rj9f-6v5g
ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete
Baja
CVE-2026-56361
ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing
Baja
CVE-2026-56374
ImageMagick has a heap-buffer-overflow in FTXT encoder
Alta
CVE-2026-26171
Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability
Alta
CVE-2026-33116
Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Media
CVE-2026-1852
Product Pricing Table by WooBeWoo <= 1.1.0 - Cross-Site Request Forgery to Stored XSS and Pricing Table Deletion
Baja
CVE-2026-32178
Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability
Alta
CVE-2026-41064
WWBN AVideo has an incomplete fix for CVE-2026-33502: Command Injection
Media
CVE-2026-41063
WWBN AVideo has an incomplete fix for CVE-2026-33500: XSS
Media
CVE-2026-41062
WWBN AVideo has an Incomplete fix: Directory traversal bypass via query string in ReceiveImage downloadURL parameters
Alta
ghsa-26wg-9xf2-q495
Novu has a XSS sanitization bypass
Alta
ghsa-4x48-cgf9-q33f
Novu has SSRF via conditions filter webhook bypasses validateUrlSsrf() protection
Media
CVE-2026-41061
WWBN AVideo has Stored XSS via Unanchored Duration Regex in Video Encoder Receiver
Alta
CVE-2026-41060
WWBN AVideo has a SSRF via same-domain hostname with alternate port bypasses isSSRFSafeURL
Media
CVE-2026-41058
WWBN AVideo has an incomplete fix for CVE-2026-33293: Path Traversal
Alta
CVE-2026-41057
WWBN AVideo has a CORS Origin Reflection Bypass via plugin/API/router.php and allowOrigin(true) Exposes Authenticated API Responses
Alta
CVE-2026-41056
WWBN AVideo has CORS Origin Reflection with Credentials on Sensitive API Endpoints Enables Cross-Origin Account Takeover
Media
CVE-2026-41055
WWBN AVideo has an incomplete fix for CVE-2026-33039: SSRF
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.