Media
CVE-2026-24604
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2026-24605
X Addons for Elementor <= 1.0.23 - Missing Authorization
Media
CVE-2022-50807
Concrete5 CMS contains an XPath injection vulnerability
Alta
CVE-2026-40721
Element Pack Pro <= 9.0.6 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2026-24601
Penci Pay Writer <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-24999
Alma <= 5.16.1 - Missing Authorization
Media
CVE-2026-24600
Penci Review <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2026-23550
Modular DS <= 2.5.1 - Unauthenticated Privilege Escalation
Media
CVE-2025-10915
Dreamer Blog <= 1.2 - Missing Authorization
Media
CVE-2026-0859
TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool
Media
CVE-2026-22820
Outray cli is vulnerable to race conditions in tunnels creation
Media
CVE-2026-22819
Outray has a Race Condition in the cli's webapp
Alta
CVE-2026-22818
Hono JWK Auth Middleware has JWT algorithm confusion when JWK lacks "alg" (untrusted header.alg fallback)
Alta
CVE-2026-22817
Hono JWT Middleware's JWT Algorithm Confusion via Unsafe Default (HS256) Allows Token Forgery and Auth Bypass
Baja
CVE-2025-15056
Quill is vulnerable to XSS via HTML export feature
Media
CVE-2026-24606
Bayarcash WooCommerce <= 4.3.12 - Missing Authorization
Alta
CVE-2025-59022
TYPO3 CMS Allows Broken Access Control in Recycler Module
Media
CVE-2025-59021
TYPO3 CMS Allows Broken Access Control in Redirects Module
Media
CVE-2025-59020
TYPO3 CMS Allows Broken Access Control in Edit Document Controller
Alta
CVE-2026-22814
Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM State
Crítica
CVE-2026-22813
Malicious website can execute commands on the local system through XSS in the OpenCode web UI
Media
CVE-2026-22809
tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability
Alta
CVE-2026-22812
OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution
Media
CVE-2026-76232
Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml file
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.