Średnia
CVE-2026-46692
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 593
Średnia
Wykorzystywana w atakach
CVE-2026-48710
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
Niska
CVE-2026-8416
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file addFavoriteFolder($id)
Niska
CVE-2026-8413
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/design
Średnia
CVE-2026-8245
Concrete CMS is Vulnerable to Reflected XSS in Legacy Pagination
Niska
CVE-2026-8432
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star()
Średnia
CVE-2026-8337
Concrete CMS is vulnerable to IDOR in surveys
Niska
CVE-2026-8409
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/delete
Niska
CVE-2026-8435
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file approveVersion()
Niska
CVE-2026-8412
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cache
Niska
CVE-2026-8410
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/delete
Niska
CVE-2026-8415
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorder
Niska
CVE-2026-8414
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicate
Niska
CVE-2026-8411
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delete
Niska
CVE-2026-8433
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan()
Niska
CVE-2026-8434
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMultiple()
Niska
CVE-2026-8427
Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFavoriteFolder($id)
Średnia
CVE-2026-8237
Concrete CMS is vulnerable to IDOR
Średnia
CVE-2026-8240
Concrete CMS is vulnerable to unauthenticated page metadata disclosure
Średnia
CVE-2026-8238
Concrete CMS is vulnerable to IDOR
Niska
CVE-2026-7886
Concrete CMS is vulnerable to IDOR in AddMessage/UpdateMessage
Niska
CVE-2026-8139
Concrete CMS is vulnerable to Stored XSS via external-link page cvName
Niska
CVE-2026-7890
Concrete CMS's RSS Displayer block accepts a feed URL from any page editor and fetches it server-side without validation
Niska
CVE-2026-7887
Concrete CMS: OAuth 2.0 Authorization-Code Handler Bypasses Account Status
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.