Alta
CVE-2026-32935
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Crítica
CVE-2026-4038
Aimogen Pro <= 2.7.5 - Unauthenticated Privilege Escalation via Arbitrary Function Call
Media
CVE-2026-4136
Membership Plugin – Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect
Crítica
ghsa-wvr4-3wq4-gpc5
MCP Connect has unauthenticated remote OS command execution via /bridge endpoint
Media
CVE-2026-56346
AVideo has Unauthenticated PGP Message Decryption via Public Endpoint
Media
CVE-2026-33319
AVideo has an OS Command Injection via Unescaped URL in LinkedIn Video Upload Shell Command
Media
CVE-2026-33238
AVideo has a Path Traversal in listFiles.json.php Enables Server Filesystem Enumeration
Media
CVE-2026-33237
AVideo has SSRF in Scheduler Plugin via callbackURL Missing `isSSRFSafeURL()` Validation
Alta
CVE-2026-33068
Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File
Media
CVE-2025-15363
Get Use APIs – JSON Content Importer < 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-39562
Client Invoicing by Sprout Invoices <= 20.8.10 - Missing Authorization
Media
CVE-2026-39521
Nelio Content <= 4.3.1 - Authenticated (Contributor+) Server-Side Request Forgery
Alta
CVE-2025-14545
YML for Yandex Market < 5.0.26 - Authenticated (Shop Manager+) Remote Code Execution
Alta
CVE-2026-3658
Appointment Booking Calendar <= 1.6.10.0 - Unauthenticated SQL Injection via 'fields' Parameter
Baja
CVE-2026-32722
Stored XSS in Memray-generated HTML reports via unescaped command-line metadata
Alta
CVE-2026-33226
Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Preview
Media
CVE-2026-8445
JustHTML has a Sanitizer Bypass (in Markdown)
Media
CVE-2026-8630
JustHTML Affected by Mutation XSS via Literal Text Serialization in Raw Text Elements (style/script)
Alta
CVE-2026-33204
SimpleJWT has an Unauthenticated Denial of Service via JWE header tampering
Crítica
CVE-2026-33180
HAPI FHIR HTTP authentication leak in redirects
Alta
CVE-2026-33080
Filament Unvalidated Range and Values summarizer values can be used for XSS
Crítica
CVE-2026-33057
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
Crítica
CVE-2026-33054
Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion
Media
CVE-2026-33177
Statamic is missing authorization check on taxonomy term creation via fieldtype
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.