Alta
CVE-2026-28788
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 738
Restablecer filtros
Media
CVE-2026-33545
MobSF has SQL Injection in its SQLite Database Viewer Utils
Media
CVE-2026-33140
Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution
Media
CVE-2026-32889
Denial of service via non-terminating SYLT frame parsing loop in tinytag
Alta
CVE-2026-33155
DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT
Media
CVE-2026-32112
ha-mcp has XSS via Unescaped HTML in OAuth Consent Form
Media
CVE-2026-32111
ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle
Media
CVE-2026-31815
django-unicorn affected by component state manipulation via unvalidated attribute access
Alta
CVE-2026-27905
BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction
Media
CVE-2026-27794
LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
Media
CVE-2026-25734
Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
Media
CVE-2026-25736
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute
Media
CVE-2026-27469
Isso affected by Stored XSS via comment website field
Alta
CVE-2026-25733
Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
Alta
CVE-2026-25136
Rucio WebUI has a Reflected Cross-site Scripting Vulnerability
Media
CVE-2026-25735
Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name
Alta
CVE-2026-53875
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER
Alta
CVE-2026-1669
Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading
Baja
CVE-2026-26013
LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
Alta
CVE-2026-1707
pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability
Media
ghsa-9mqm-qcwf-5qhg
CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted compressed inputs to exhaust resources
Media
ghsa-mxwc-wh95-pw4g
Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler
Alta
CVE-2026-59939
httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling
Alta
CVE-2026-59925
Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.