Alta
CVE-2026-33128
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2026-1323
The mailqueue TYPO3 extension has Insecure Deserialization in `TransportFailure` class
Media
CVE-2026-82868
Cross-Site Scripting (XSS) via SVG Schema innerHTML Injection in @pdfme/schemas
Media
CVE-2026-82867
Cross-Site Scripting (XSS) via Select Schema Option Value Injection in @pdfme/schemas
Sin evaluar
CVE-2026-4393
drupal/autologout - SA-CONTRIB-2026-030
Alta
CVE-2026-56236
Capgo CLI: symlink-following local secret writes enable arbitrary file overwrite + world-readable credentials (0600 missing)
Alta
CVE-2026-32609
Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials
Media
CVE-2026-33060
SSRF in @aborruso/ckan-mcp-server via base_url allows access to internal networks
Alta
CVE-2026-32763
SQL Injection via unsanitized JSON path keys when ignoring/silencing compilation errors or using `Kysely<any>`.
Media
CVE-2026-33051
Craft CMS Vulnerable to Stored XSS in Revision Context Menu
Alta
CVE-2026-22730
SQL Injection in Spring AI MariaDBFilterExpressionConverter
Alta
CVE-2026-22729
JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter
Alta
CVE-2026-32608
Glances has a Command Injection via Process Names in Action Command Templates
Media
CVE-2026-2575
Keycloak: Denial of Service due to excessive SAMLRequest decompression
Alta
CVE-2026-32596
Glances exposes the REST API without authentication
Alta
CVE-2026-30922
Denial of Service in pyasn1 via Unbounded Recursion
Alta
CVE-2026-2603
Keycloak: Unauthorized authentication via disabled SAML Identity Provider
Alta
CVE-2026-28500
ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack
Alta
CVE-2026-27459
pyOpenSSL DTLS cookie callback buffer overflow
Baja
CVE-2026-27448
pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback
Alta
CVE-2026-1238
SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh'
Alta
CVE-2026-25447
Widget Wrangler <= 2.3.9 - Authenticated (Author+) Remote Code Execution
Alta
CVE-2026-25445
Wishlist Member <= 3.32.0 - Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2026-2571
Download Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' Parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.