Alta
CVE-2026-32175
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2026-45736
ws: Uninitialized memory disclosure
Media
CVE-2026-45731
AVideo: Authenticated Arbitrary File Read in view/update.php
Alta
CVE-2025-57282
ngrok is Vulnerable to Command Injection
Crítica
CVE-2026-4885
Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload
Crítica
CVE-2026-4883
Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload
Baja
ghsa-jgg6-4rpr-wfh7
Broken dropper in @mistralai/mistralai, @mistralai/mistralai-azure, @mistralai/mistralai-gcp
Crítica
ghsa-wx9m-wx4f-4cmg
Malicious dropper in mistralai 2.4.6 PyPI package
Media
CVE-2026-45031
ImageMagick: Policy Bypass in PSD decoder
Media
CVE-2026-45358
ImageMagick: Out-of-Bounds Read of a single byte in meta encoder
Media
CVE-2026-45359
ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define
Media
CVE-2026-45719
Budibase: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views API
Media
CVE-2026-45718
Budibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rows
Alta
CVE-2026-45716
Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration
Alta
CVE-2026-45707
n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete
Alta
CVE-2026-8159
multiparty vulnerable to ReDoS via filename parsing
Alta
CVE-2026-8162
multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing
Alta
CVE-2026-8161
multiparty: Denial of Service via Prototype Pollution leads to Uncaught Exception
Baja
ghsa-9m6v-8fxc-4r44
Sulu: Used API Keys may be available via Admin API
Media
CVE-2026-45701
Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens
Crítica
CVE-2026-45697
Formie: Pre-authenticated server-side template injection in Hidden fields
Alta
CVE-2026-45325
@tmlmobilidade/utils has prototype pollution in its setValueAtPath
Baja
CVE-2026-2728
LibreNMS: Cross-Site Scripting in ShowConfigController
Alta
CVE-2026-42559
dynoxide: DNS rebinding and cross-origin CSRF via MCP HTTP transport
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.