Alta
CVE-2026-0933
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Baja
CVE-2026-24048
Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`
Media
CVE-2026-24047
@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass
Alta
CVE-2026-24046
Backstage has a Possible Symlink Path Traversal in Scaffolder Actions
Alta
CVE-2021-47853
phpPgAdmin contains a remote command execution vulnerability
Crítica
CVE-2026-0920
LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter
Alta
CVE-2026-23957
Seroval affected by Denial of Service via Array serialization
Alta
CVE-2026-23956
seroval affected by Denial of Service via RegExp serialization
Alta
ghsa-h3hw-29fv-2x75
@envelop/graphql-modules has a Race Condition vulnerability
Alta
CVE-2026-23965
sm-crypto Affected by Signature Forgery in SM2-DSA
Alta
CVE-2026-23967
sm-crypto Affected by Signature Malleability in SM2-DSA
Crítica
CVE-2026-23966
sm-crypto Affected by Private Key Recovery in SM2-PKE
Media
CVE-2026-23959
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
Media
CVE-2026-0895
mailqueue TYPO3 extension affected by Insecure Deserialization in QueueableFileTransport
Alta
CVE-2026-23737
seroval Affected by Remote Code Execution via JSON Deserialization
Alta
CVE-2026-23736
seroval Affected by Prototype Pollution via JSON Deserialization
Crítica
CVE-2026-23524
Laravel Redis Horizontal Scaling Insecure Deserialization
Alta
CVE-2026-22444
Apache Solr: Insufficient file-access checking in standalone core-creation requests
Alta
CVE-2026-22022
Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin
Baja
CVE-2025-14083
Keycloak Admin REST API exposes backend schema and rules
Media
CVE-2026-1036
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion
Media
CVE-2025-14559
Keycloak services allows the issuance of access and refresh tokens for disabled users
Baja
CVE-2026-1035
Keycloak does not validate and update refresh token usage atomically
Media
CVE-2026-23952
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.