Media
CVE-2026-23476
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.406
Restablecer filtros
Alta
CVE-2026-24788
RaspAP raspap-webgui contains an OS Command Injection vulnerability
Media
CVE-2026-25129
PsySH has Local Privilege Escalation via CWD .psysh.php auto-load
Media
CVE-2026-24739
Symfony's incorrect argument escaping under MSYS2/Git Bash can lead to destructive file operations on Windows
Alta
CVE-2026-22243
EGroupware has SQL Injection in Nextmatch Filter Processing
Alta
CVE-2026-24765
PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling
Alta
CVE-2020-36947
LibreNMS contains an authenticated SQL Injection vulnerability
Media
CVE-2026-24422
phpMyFAQ: Public API endpoints expose emails and invisible questions
Media
CVE-2026-24421
phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)
Media
CVE-2026-24420
phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)
Media
CVE-2025-71177
LavaLite CMS affected by a stored cross-site scripting vulnerability
Baja
CVE-2026-26188
Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue
Alta
CVE-2021-47853
phpPgAdmin contains a remote command execution vulnerability
Media
CVE-2026-23959
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
Media
CVE-2026-0895
mailqueue TYPO3 extension affected by Insecure Deserialization in QueueableFileTransport
Media
CVE-2026-23626
Kimai has an Authenticated Server-Side Template Injection (SSTI)
Baja
CVE-2026-1195
MineAdmin improperly refreshes tokens
Baja
CVE-2026-1193
MineAdmin has Incorrect Privilege Assignment
Alta
CVE-2025-14894
Livewire Filemanager does not restrict uploaded file types
Baja
ghsa-rwr8-xrpw-9qf5
solspace/craft-freeform Exposed to Known Axios Vulnerabilities via Precompiled Assets
Baja
ghsa-44jg-mv3h-wj6g
solspace/craft-freeform Vulnerable to XSS in `PhpSpreadsheet` HTML Writer Due to Unsanitized Styling Data
Alta
CVE-2026-23622
alextselegidis/easyappointments is Vulnerable to CSRF Protection Bypass
Alta
CVE-2021-47763
Aimeos contains a SQL injection vulnerability in the json api 'sort' parameter
Media
CVE-2026-23496
Pimcore Web2Print Tools Bundle "Favourite Output Channel Configuration" Missing Function Level Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.