Media
CVE-2026-34384
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2026-34382
Admidio has Missing CSRF Protections on Custom List Deletion in mylist_function.php
Alta
CVE-2026-34381
Admidio allows Unauthenticated Access to Role-Restricted documents via neutralized .htaccess
Alta
CVE-2026-32734
baserCMS is Vulnerable to Cross-site Scripting
Crítica
CVE-2026-32714
SciTokens is vulnerable to SQL Injection in KeyCache
Media
CVE-2026-32629
phpMyFAQ is Vulnerable to Stored XSS via Unsanitized Email Field in Admin FAQ Editor
Alta
CVE-2026-30940
baserCMS Path Traversal Leads to Arbitrary File Write and RCE via Theme File API
Crítica
CVE-2026-30880
baserCMS has OS command injection vulnerability in installer
Media
CVE-2026-30879
baserCMS has a cross-site scripting vulnerability in blog posts
Media
CVE-2026-30878
baserCMS has Mail Form Acceptance Bypass via Public API
Crítica
CVE-2026-30877
baserCMS Update Functionality Vulnerable to OS Command Injection
Media
CVE-2026-27697
baserCMS has an SQL injection vulnerability in its blog post functionality
Crítica
CVE-2026-21861
baserCMS has OS Command Injection Leading to Remote Code Execution (RCE)
Alta
CVE-2025-32957
baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE)
Media
CVE-2026-34452
Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
Media
CVE-2026-34450
Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool
Baja
CVE-2026-34203
Nautobot: Management of users via REST API does not apply configured password validators
Media
CVE-2026-34231
Slippers Vulnerable to Cross-Site Scripting (XSS) in `attrs` Template Tag
Crítica
CVE-2026-0596
Mlflow: Command Injection when serving models with enable_mlserver=True
Media
CVE-2026-3831
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
Media
CVE-2026-4668
Amelia <= 2.1.2 - Authenticated (Manager+) SQL Injection via 'sort' Parameter
Media
CVE-2026-2480
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max_width' Shortcode Attribute
Baja
CVE-2026-34073
cryptography has incomplete DNS name constraint enforcement on peer names
Alta
CVE-2026-34070
LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.