Alta
CVE-2026-39370
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 400
Restablecer filtros
Media
CVE-2026-39368
WWBN AVideo has a Live restream log callback flow enabling stored SSRF to internal services
Media
CVE-2026-39367
WWBN AVideo has Stored XSS via Malicious EPG XML Program Titles in AVideo EPG Page
Alta
CVE-2026-35470
OpenSTAManager has a SQL Injection via righe Parameter in confronta_righe Modals
Alta
CVE-2026-35168
OpenSTAManager: SQL Injection via Aggiornamenti Module
Alta
CVE-2026-34728
phpMyFAQ: Path Traversal - Arbitrary File Deletion in MediaBrowserController
Media
CVE-2026-34737
AVideo: Arbitrary Stripe Subscription Cancellation via Debug Endpoint and retrieveSubscriptions() Bug
Media
CVE-2026-34716
AVideo: DOM XSS via Unsanitized Display Name in WebSocket Call Notification
Alta
CVE-2026-28805
OpenSTAManager has a Time-Based Blind SQL Injection via `options[stato]` Parameter
Media
CVE-2026-34395
AVideo vulnerable to Mass User PII Disclosure via Missing Authorization in YPTWallet users.json.php
Media
CVE-2026-34384
Admidio has Missing CSRF Protection on Registration Approval Actions
Alta
CVE-2026-34381
Admidio allows Unauthenticated Access to Role-Restricted documents via neutralized .htaccess
Media
CVE-2026-32629
phpMyFAQ is Vulnerable to Stored XSS via Unsanitized Email Field in Admin FAQ Editor
Media
CVE-2026-30878
baserCMS has Mail Form Acceptance Bypass via Public API
Alta
CVE-2025-32957
baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE)
Media
CVE-2026-34362
AVideo's WebSocket Token Never Expires Due to Commented-Out Timeout Validation in verifyTokenSocket()
Media
CVE-2026-34036
Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php
Crítica
CVE-2026-33867
AVideo has Plaintext Video Password Storage
Alta
CVE-2026-33723
AVideo is Vulnerable to SQL Injection through Subscribe Endpoint via Unsanitized user_id Parameter
Alta
CVE-2026-33719
AVideo: Unauthenticated CDN Configuration Takeover via Empty Default Key Bypass and Mass-Assignment
Alta
CVE-2026-33717
AVideo: Remote Code Execution via PHP Temp File in Encoder downloadURL
Alta
CVE-2026-33686
Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil
Media
CVE-2026-33685
AVideo Allows Unauthenticated Access to AD_Server reports.json.php that Exposes Ad Campaign Analytics and User Data
Alta
CVE-2026-33681
AVideo has Path Traversal in pluginRunDatabaseScript.json.php Enables Arbitrary SQL File Execution via Unsanitized Plugin Name
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.