Media
CVE-2026-25407
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-68042
Travelpayouts <= 1.2.3 - Missing Authorization
Media
CVE-2026-25323
OSM – OpenStreetMap <= 6.1.12 - Missing Authorization
Media
CVE-2026-25321
SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Missing Authorization
Alta
CVE-2025-69371
KindlyCare <= 1.6.1 - Unauthenticated PHP Object Injection
Media
CVE-2025-68854
ID Arrays <= 2.1.2 - Reflected Cross-Site Scripting
Media
CVE-2026-25402
Echo Knowledge Base – Documentation, FAQs, AI Chat & AI Search <= 16.011.0 - Missing Authorization
Media
CVE-2025-67547
Konte <= 2.4.6 - Missing Authorization
Media
CVE-2026-25404
WP Job Manager <= 2.4.0 - Missing Authorization
Media
CVE-2026-25322
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.7.22 - Cross-Site Request Forgery
Media
CVE-2026-25408
Broken Link Notifier <= 1.3.5 - Missing Authorization
Media
CVE-2026-24368
The Grid < 2.8.0 - Missing Authorization
Media
CVE-2026-24383
B Slider <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-25016
Nelio Popups <= 1.3.5 - Missing Authorization
Media
CVE-2025-68051
Shiprocket <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Alta
CVE-2025-69368
SOHO - Photography WordPress <= 3.0.3 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2025-69370
Capella <= 2.5.5 - Unauthenticated PHP Object Injection
Media
CVE-2026-24766
NocoDB has Prototype Pollution in Connection Test Endpoint, Leading to DoS
Media
CVE-2026-24767
NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality
Media
CVE-2026-24768
NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter
Alta
CVE-2026-24769
NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload
Crítica
CVE-2026-24838
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
Media
CVE-2026-24739
Symfony's incorrect argument escaping under MSYS2/Git Bash can lead to destructive file operations on Windows
Sin evaluar
pysec-2026-1
A single post-release of dydx-v4-client contained obfuscated multi-stage loader
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.