Todas las CVE de los últimos seis meses, actualizadas a diario.
Vulnerabilidades publicadas directamente desde la National Vulnerability Database, con gravedad, clase CWE y productos afectados. Búscalas, fíltralas y mira qué ha salido hoy.
- 294 publicadas en las últimas 24 horas
- 2895 en los últimos 7 días
- 58.248 en los últimos seis meses
Fuente: NVD (National Vulnerability Database) · Actualizado el 23 sept 2026
Mostrando 4 de 4
undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, a response carrying a degenerate qualified private directive, such as private set to an empty value, can be stor
HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its form fields should be cached. If sensitive information in application responses is stored in the local
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when an authenticated user modify specific configurations. This could allow an authenti
@astrojs/node allows Astro to deploy your SSR site to Node targets. Prior to 10.0.5, requesting a static js/css resources from _astro path with an incorrect/malformed if-match header returns a 500 error with a one year cache lifetime instead of 412 in some cas
Encuentra el fallo antes que un atacante.
Inicia sesión con GitHub y ejecuta tu primera auditoría en menos de un minuto. El plan gratuito no requiere tarjeta de crédito.