Alta
CVE-2025-52558
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 20
Restablecer filtros
Alta
CVE-2024-56509
changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal
Alta
CVE-2024-51998
changedetection.io path traversal using file URI scheme without supplying hostname
Media
CVE-2024-51483
changedetection.io Path Traversal
Media
CVE-2024-34061
changedetection.io Cross-site Scripting vulnerability
Crítica
CVE-2024-32651
changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution
Alta
CVE-2026-43891
changedetection.io has an Arbitrary Local File Read via a crafted backup restore
Alta
CVE-2026-41895
changedetection.io project has an XXE vulnerability
Crítica
CVE-2026-35490
changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering
Sin evaluar
CVE-2026-35000
ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read arbitrary local files by using unblocked XPat
Alta
CVE-2026-33981
Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
Alta
CVE-2026-29065
changedetection.io has Zip Slip vulnerability in the backup restore functionality
Media
CVE-2026-29038
changedetection.io has Reflected XSS in its RSS Tag Error Response
Alta
CVE-2026-29039
changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()
Media
CVE-2026-27645
changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response
Alta
CVE-2026-27696
changedetection.io is Vulnerable to SSRF via Watch URLs
Media
CVE-2026-25527
changedetection.io is vulnerable to unauthenticated static path traversal
Baja
CVE-2025-62780
changedetection.io: Stored XSS in Watch update via API
Baja
CVE-2024-23329
changedetection.io API endpoint is not secured with API token
Media
CVE-2023-24769
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts o
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.