Alta
CVE-2026-33226
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2026-8445
JustHTML has a Sanitizer Bypass (in Markdown)
Media
CVE-2026-8630
JustHTML Affected by Mutation XSS via Literal Text Serialization in Raw Text Elements (style/script)
Alta
CVE-2026-33204
SimpleJWT has an Unauthenticated Denial of Service via JWE header tampering
Crítica
CVE-2026-33180
HAPI FHIR HTTP authentication leak in redirects
Alta
CVE-2026-33080
Filament Unvalidated Range and Values summarizer values can be used for XSS
Crítica
CVE-2026-33057
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
Crítica
CVE-2026-33054
Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion
Media
CVE-2026-33177
Statamic is missing authorization check on taxonomy term creation via fieldtype
Media
CVE-2026-33171
Statamic has a path traversal in file dictionary fieldtype
Alta
CVE-2026-33172
Statamic has Stored XSS via SVG Sanitization Bypass
Alta
CVE-2026-33166
Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers)
Alta
CVE-2026-33163
Parse Server leaks protected fields via LiveQuery afterEvent trigger
Crítica
CVE-2026-32731
ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction
Alta
CVE-2026-32730
ApostropheCMS MFA/TOTP Bypass via Incorrect MongoDB Query in Bearer Token Middleware
Media
CVE-2026-3475
Instant Popup Builder <= 1.1.7 - Unauthenticated Arbitrary Shortcode Execution via 'token' Parameter
Media
CVE-2026-30048
NotChatbot WebChat has a stored cross-site scripting (XSS) vulnerability
Alta
CVE-2026-33001
Jenkins has a link following vulnerability allows arbitrary file creation
Alta
CVE-2026-33002
Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation
Media
CVE-2026-33004
Jenkins LoadNinja Plugin does not mask LoadNinja API keys displayed on the job configuration form
Media
CVE-2026-33003
Jenkins LoadNinja Plugin stores LoadNinja API keys unencrypted in job config.xml files
Alta
CVE-2026-32634
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
Media
CVE-2026-32632
Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding
Alta
CVE-2026-32611
Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.