Todas las CVE de los últimos seis meses, actualizadas a diario.
Vulnerabilidades publicadas directamente desde la National Vulnerability Database, con gravedad, clase CWE y productos afectados. Búscalas, fíltralas y mira qué ha salido hoy.
- 362 publicadas en las últimas 24 horas
- 2933 en los últimos 7 días
- 58.248 en los últimos seis meses
Fuente: NVD (National Vulnerability Database) · Actualizado el 23 sept 2026
Mostrando 5 de 5
motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, motionEye accepts the client-controlled meye_username and meye_password_hash cookies as authenticatio
OpenProject is open-source, web-based project management software. Prior to 17.4.0, the GET /api/v3/relations endpoint allows any authenticated user to retrieve relations — and the subject (title) of work packages they have no permission to view — by supplying
Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client. This could allow an attacker, who knows the hash, to authenticate and gain full access.
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's scoped API token enforcement for custom project background routes is method-confused. A token with only projects.background can successfully delete a project background,
CWE-836vikunja vikunjaCEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the password field. Attackers can paste a large string of repeated characters into the password input du
CWE-836cewe photo_show
Encuentra el fallo antes que un atacante.
Inicia sesión con GitHub y ejecuta tu primera auditoría en menos de un minuto. El plan gratuito no requiere tarjeta de crédito.