Baja
ghsa-9m6v-8fxc-4r44
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2026-45701
Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens
Crítica
CVE-2026-45697
Formie: Pre-authenticated server-side template injection in Hidden fields
Alta
CVE-2026-45325
@tmlmobilidade/utils has prototype pollution in its setValueAtPath
Baja
CVE-2026-2728
LibreNMS: Cross-Site Scripting in ShowConfigController
Alta
CVE-2026-42559
dynoxide: DNS rebinding and cross-origin CSRF via MCP HTTP transport
Alta
CVE-2026-45302
parse-nested-form-data has Prototype Pollution via `__proto__` in FormData field names
Alta
CVE-2026-45300
async-http-client: Cookie header not stripped on cross-origin redirect
Media
CVE-2026-47741
shopper/framework: Race condition on Discount.usage_limit allows silent over-redemption
Alta
CVE-2026-47740
shopper/framework: Authorization bypass in multiple Livewire admin components
Alta
CVE-2026-45270
CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule
Media
CVE-2026-45149
brace-expansion: Large numeric range defeats documented `max` DoS protection
Media
CVE-2026-45139
CI4MS Fileeditor allows deletion and rename of critical application files due to missing extension allowlist on destructive operations
Media
CVE-2026-45138
CI4MS: Stored XSS in Blog Content via Broken `html_purify` Validation Rule
Media
ghsa-5r97-79vw-qvm4
Microsoft DirectX12: .spritefont multiply overflow only in 32-bit builds
Media
ghsa-c55g-rp4x-fx84
Microsoft DirectX: .spritefont multiply overflow only in 32-bit builds
Alta
ghsa-j5rm-v3vh-vx94
eduMFA Passkeys: missing expiration flag may allow replay attacks and reuse of old challenges
Alta
ghsa-qq2p-4282-cfc5
eduMFA: Incorrect InnoDB snapshot isolation possibly allows token reusage
Media
ghsa-74r7-3mjm-jc5v
eduMFA: Unauthenticated Failcounter Increment on Resolver Tokens via /validate/check
Media
CVE-2026-45660
Statamic CMS: Server-Side Request Forgery via Glide
Media
CVE-2026-42326
ImageMagick: Heap Buffer Over-Read in IPTC encoder
Media
CVE-2026-45577
Neotoma: Unauthenticated Inspector/API access via reverse-proxy loopback auth bypass
Baja
ghsa-97r8-rf7q-wmjw
Sveltia CMS: Stored XSS in entry summary rendering via entity-decoded HTML
Media
CVE-2026-6402
webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.