Alta
CVE-2026-31018
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Alta
CVE-2026-31019
Dolibarr user with permission to edit PHP content can bypass filtering to restrict dangerous PHP functions
Media
CVE-2026-40155
Auth0 Next.js SDK has Improper Proxy Cache Lookup
Media
CVE-2026-40098
OpenMage LTS: Cross-user wishlist import leads to private option & file disclosure
Alta
CVE-2026-35570
OpenClaude: Sandbox Bypass via Early-Exit Logic Flaw Allows Path Traversal
Crítica
CVE-2026-32613
Spinnaker: RCE via expression parsing due to unrestricted context handling
Crítica
CVE-2026-32604
Spinnaker: RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths
Media
CVE-2026-25525
OpenMage LTS has a Path Traversal Filter Bypass in Dataflow Module
Alta
CVE-2026-25524
OpenMage LTS: Phar Deserialization leads to Remote Code Execution
Media
CVE-2026-39378
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
Media
CVE-2026-39377
nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
Media
CVE-2026-35588
Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values
Alta
CVE-2026-35587
Glances has SSRF in IP Plugin via public_api leading to credential leakage
Alta
CVE-2026-34839
Glances: Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS
Media
CVE-2026-40773
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 - Missing Authorization
Alta
CVE-2026-40765
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.9 - Unauthenticated Stored Cross-Site Scripting
Crítica
CVE-2026-40769
Contact Form Extender for Divi – Submissions DB & Extra Fields <= 1.0.6 - Unauthenticated Arbitrary File Deletion
Crítica
CVE-2026-4357
Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload
Alta
CVE-2026-40770
Coupon Affiliates – Affiliate Plugin for WooCommerce <= 7.5.3 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-40768
Salon Booking System – Free Version <= 10.30.24 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-40766
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.25 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-40772
GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content <= 1.2.2 - Unauthenticated Arbitrary File Upload
Alta
CVE-2026-40771
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.6 - Unauthenticated SQL Injection
Alta
CVE-2026-39438
ListingPro Plugin <= 2.9.10 - Unauthenticated SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.