Media
CVE-2026-39628
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2026-1671
Activity Log for WordPress <= 1.2.8 - Missing Authorization to Sensitive Information Exposure via Log File
Media
CVE-2025-69873
ajv has ReDoS when using `$data` option
Media
CVE-2026-1356
Converter for Media – Optimize images | Convert WebP & AVIF <= 6.5.1 - Unauthenticated Server-Side Request Forgery via src
Alta
CVE-2026-25990
Pillow affected by out-of-bounds write when loading PSD images
Media
CVE-2025-69874
nanotar is vulnerable to path traversal in parseTar() and parseTarGzip()
Alta
CVE-2026-25759
Statamic CMS vulnerable to privilege escalation via stored cross-site scripting
Sin evaluar
CVE-2026-2349
drupal/ui_icons - SA-CONTRIB-2026-010
Media
CVE-2026-25633
Statamic CMS's missing authorization allows access to assets
Sin evaluar
CVE-2026-2348
drupal/quickedit - SA-CONTRIB-2026-009
Media
CVE-2018-25157
Phraseanet vulnerable to stored cross-site scripting through crafted file names
Media
CVE-2019-25317
Kimai 2 vulnerable to persistent cross-site scripting in the timesheet descriptions
Crítica
CVE-2026-26021
set-in Affected by Prototype Pollution
Media
CVE-2026-26019
@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation
Alta
CVE-2026-26010
Leaky JWTs in OpenMetadata exposing highly-privileged bot users
Media
CVE-2026-1537
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.6 - Missing Authorization to Booking Details Exposure
Crítica
CVE-2026-1729
AdForest <= 6.0.12 - Authentication Bypass
Media
CVE-2026-32348
MAS Videos <= 1.3.2 - Missing Authorization
Alta
CVE-2025-69405
Lorem Ipsum | Books & Media Store <= 1.2.6 - Unauthenticated PHP Object Injection
Alta
CVE-2025-68526
Modal Popup Box <= 1.6.1 - Authenticated (Contributor+) PHP Object Injection
Media
CVE-2026-39625
TechOne <= 3.0.3 - Unauthenticated Arbitrary Shortcode Execution
Alta
CVE-2025-69400
Yokoo <= 1.1.11 - Unauthenticated Local File Inclusion
Alta
CVE-2025-69404
Extreme Store <= 1.5.7 - Unauthenticated PHP Object Injection
Media
CVE-2025-69401
WooODT Lite <= 2.5.5 - Unauthenticated Payment Bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.