Media
CVE-2026-15385
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.515
Media
CVE-2026-14315
Pixel Tag Manager for WooCommerce – Google Analytics 4, Google Ads, and More Pixels < 2.2.1 - Unauthenticated Conversion Forge
Media
CVE-2026-57701
Real Estate Manager Pro <= 12.8.5 - Reflected Cross-Site Scripting
Media
CVE-2026-10524
CoCart <= 4.8.0 - Unauthenticated Price Manipulation
Media
CVE-2026-15147
Five Star Restaurant Reservations <= 2.7.22 - Unauthenticated Insecure Direct Object Reference to Payment Bypass
Alta
CVE-2026-57696
Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.6.5 - Authenticated (Contributor+) Arbitrary File Deletion
Sin evaluar
CVE-2023-54366
SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database ac
Sin evaluar
876
chronoforms
Sin evaluar
873
dpcalendar - Other
Alta
CVE-2026-55177
CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard
Media
CVE-2026-54570
AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass
Media
ghsa-mfr4-mq8w-vmg6
PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
Media
CVE-2026-53496
ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes
Alta
CVE-2026-53597
Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader
Alta
CVE-2026-53598
Prompty: Arbitrary file read via file reference expansion
Media
CVE-2026-54561
mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath
Media
ghsa-cvpc-hccg-wmw4
Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration
Media
CVE-2026-54546
TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard
Alta
CVE-2026-11400
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
Media
ghsa-8rqh-vxpr-x77p
plone.restapi: Stored XSS by spoofing mime type
Media
CVE-2026-9734
W3SC Elementor to Zoho CRM <= 2.2.0 - Cross-Site Request Forgery to Settings Update
Media
CVE-2026-15244
HUSKY - Products Filter Professional for WooCommerce <= 1.4.0 - Authenticated (Shop manager+) Local File Inclusion
Media
CVE-2026-15246
RealHomes Memberships <= 3.0.0 - Authenticated (Subscriber+) Payment Bypass
Crítica
CVE-2026-61951
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated Privilege Escalation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.