Media
CVE-2026-24739
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 400
Restablecer filtros
Alta
CVE-2026-22243
EGroupware has SQL Injection in Nextmatch Filter Processing
Alta
CVE-2020-36947
LibreNMS contains an authenticated SQL Injection vulnerability
Media
CVE-2026-23959
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
Media
CVE-2026-0895
mailqueue TYPO3 extension affected by Insecure Deserialization in QueueableFileTransport
Media
CVE-2026-23626
Kimai has an Authenticated Server-Side Template Injection (SSTI)
Alta
CVE-2026-23492
Pimcore Has an Incomplete Patch for CVE-2023-30848
Media
CVE-2022-50807
Concrete5 CMS contains an XPath injection vulnerability
Media
CVE-2026-22242
CoreShop Vulnerable to SQL Injection via Admin Reports
Alta
CVE-2026-21857
Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read
Alta
CVE-2025-68455
Craft CMS vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior
Media
CVE-2025-68614
LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
Alta
CVE-2025-65346
alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality
Sin evaluar
CVE-2025-13979
drupal/minisite - SA-CONTRIB-2025-117
Alta
CVE-2025-66305
Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter
Media
CVE-2025-66306
Grav vulnerable to Information Disclosure via IDOR in Grav Admin Panel
Media
CVE-2025-66302
Grav vulnerable to Path Traversal allowing server files backup
Media
CVE-2025-65093
LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
Alta
CVE-2025-62519
phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality
Media
CVE-2025-64714
PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
Alta
CVE-2025-64519
TorrentPier is Vulnerable to Authenticated SQL Injection through Moderator Control Panel's topic_id parameter
Baja
CVE-2025-10931
drupal/umami_analytics - SA-CONTRIB-2025-109
Media
CVE-2025-10927
drupal/plausible_tracking - SA-CONTRIB-2025-107
Alta
CVE-2025-62617
Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.