Media
CVE-2026-3498
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2026-3371
Tutor LMS <= 3.9.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Course Content Modification
Alta
CVE-2026-5217
Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter
Media
CVE-2026-4895
Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute
Media
CVE-2026-3358
Tutor LMS <= 3.9.7 - Missing Authorization to Authenticated (Subscriber+) Unauthorized Private Course Enrollment
Media
CVE-2026-5226
Optimole <= 4.2.3 - Reflected Cross-Site Scripting via Page Profiler URL
Alta
CVE-2026-22750
Spring Cloud Gateway's SSL bundle configuration silently bypassed
Crítica
CVE-2026-1115
parisneo/lollms vulnerable to stored XSS in the social feature
Baja
CVE-2026-6011
OpenClaw vulnerable to SSRF in src/agents/tools/web-fetch.ts
Media
CVE-2026-33551
An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application
Media
CVE-2026-5986
Zod jsVideoUrlParser vulnerable to ReDoS in util.js
Alta
CVE-2026-34487
Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File
Alta
CVE-2026-34483
Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve
Alta
Explotada en ataques
CVE-2026-34486
Apache Tomcat Missing Encryption of Sensitive Data vulnerability
Media
CVE-2026-34500
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
Alta
CVE-2026-24880
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability
Media
CVE-2026-25854
Apache Tomcat has an Open Redirect vulnerability
Alta
CVE-2026-29146
Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor
Media
CVE-2026-32990
Apache Tomcat has an Improper Input Validation vulnerability
Crítica
CVE-2026-29145
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
Alta
CVE-2026-29129
Apache Tomcat: Configured cipher preference order not preserved
Alta
CVE-2026-4162
Gravity SMTP <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Plugin Uninstall
Media
ghsa-9gjv-jvm7-vv2v
Gramps Web API: Private Sub-Object Data in Non-Private Objects Exposed to Guest Users
Baja
CVE-2026-41915
OpenClaw: GIT_DIR and related git plumbing env vars missing from exec env denylist (GHSA-m866-6qv5-p2fg variant)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.