Media
CVE-2026-45620
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Alta
CVE-2026-45609
Spring AI MCP Security: Unvalidated URL Fetching (SSRF)
Alta
CVE-2026-46510
form-data-objectizer: Prototype pollution in form-data-objectizer via bracket-notation form keys
Alta
ghsa-qw48-84f6-28gv
Graphite Has a Pickle Deserialization Vulnerability
Media
CVE-2026-45582
n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parameters
Crítica
CVE-2026-7301
SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket
Crítica
CVE-2026-7302
SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability
Crítica
CVE-2026-7304
SGLang: Unauthenticated RCE via --enable-custom-logit-processor
Media
CVE-2026-8771
org.linlinjava:litemall-wx-api has an Injection issue
Baja
CVE-2026-8769
@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue
Baja
CVE-2026-8766
@kilocode/cli Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Media
CVE-2026-42681
E2Pdf – Export Pdf Tool for WordPress <= 1.32.14 - Reflected Cross-Site Scripting
Alta
CVE-2026-8912
Contest Gallery <= 28.1.6 - Unauthenticated SQL Injection
Media
CVE-2026-42682
wpForo Forum <= 3.0.6 - Missing Authorization
Alta
CVE-2026-39079
Sensitive data exposure via publicly accessible logs in upsshipping module from Agence Web 360 for PrestaShop
Media
CVE-2026-8759
Beetl's SpELFunction extension function has an expression injection risk
Crítica
CVE-2026-42680
Contest Gallery Pro <= 29.0.1 - Unauthenticated Privilege Escalation
Media
CVE-2026-42679
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Authenticated (Subscriber+) Arbitrary File Download
Alta
CVE-2018-25329
WP with Spritz <= 1.0 - Unauthenticated Local File Inclusion
Alta
CVE-2018-25324
Simple Fields <= 0.3.5 - Unauthenticated Local File Inclusion
Alta
CVE-2026-8719
AI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token
Alta
CVE-2026-8657
jsondiffpatch patch APIs are vulnerable to prototype pollution
Alta
CVE-2020-37244
Membership by Supsystic <= 1.4.7 - Unauthenticated SQL Injection
Media
CVE-2020-37235
Wibar <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.