Alta
CVE-2020-36947
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.068
Restablecer filtros
Media
CVE-2026-24422
phpMyFAQ: Public API endpoints expose emails and invisible questions
Media
CVE-2026-24421
phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)
Media
CVE-2026-24420
phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)
Media
CVE-2025-71177
LavaLite CMS affected by a stored cross-site scripting vulnerability
Alta
CVE-2025-67847
Moodle affected by a code injection vulnerability
Baja
CVE-2026-26188
Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue
Alta
CVE-2021-47853
phpPgAdmin contains a remote command execution vulnerability
Media
CVE-2026-23959
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
Media
CVE-2026-0895
mailqueue TYPO3 extension affected by Insecure Deserialization in QueueableFileTransport
Crítica
CVE-2026-23524
Laravel Redis Horizontal Scaling Insecure Deserialization
Media
CVE-2026-23626
Kimai has an Authenticated Server-Side Template Injection (SSTI)
Media
CVE-2025-69198
Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted
Baja
CVE-2026-1195
MineAdmin improperly refreshes tokens
Baja
CVE-2026-1196
MineAdmin May Expose Sensitive Information to an Unauthorized Actor
Media
CVE-2026-1194
MineAdmin May Expose Sensitive Information to an Unauthorized Actor
Baja
CVE-2026-1193
MineAdmin has Incorrect Privilege Assignment
Media
CVE-2026-23643
CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting
Alta
CVE-2025-14894
Livewire Filemanager does not restrict uploaded file types
Baja
ghsa-rwr8-xrpw-9qf5
solspace/craft-freeform Exposed to Known Axios Vulnerabilities via Precompiled Assets
Baja
ghsa-44jg-mv3h-wj6g
solspace/craft-freeform Vulnerable to XSS in `PhpSpreadsheet` HTML Writer Due to Unsanitized Styling Data
Baja
ghsa-58q2-9x27-h2jm
solspace/craft-freeform Has a DoS Vulnerability
Alta
CVE-2026-23622
alextselegidis/easyappointments is Vulnerable to CSRF Protection Bypass
Alta
CVE-2021-47763
Aimeos contains a SQL injection vulnerability in the json api 'sort' parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.