Alta
CVE-2025-52465
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.280
Restablecer filtros
Alta
CVE-2026-50645
Apache cxf-core: No restriction on attachment headers per message
Media
CVE-2026-50634
Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry
Crítica
CVE-2026-50627
Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token Validator
Alta
CVE-2025-27511
GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection
Alta
CVE-2026-48059
Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion
Media
CVE-2026-11986
Keycloak Admin UI REST Extensions: bulk role-removal endpoints fail to perform granular permission checks
Media
CVE-2026-48043
netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion
Media
CVE-2026-48040
netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access
Alta
CVE-2026-48006
Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator
Alta
CVE-2026-41699
Spring for GraphQL: Unsafe Deserialization
Media
CVE-2026-40995
Spring Web Services: X.509 authentication bypasses Spring Security account checks
Baja
CVE-2026-41000
Spring Web Services: WSS4J validation does not use configured replay cache
Alta
CVE-2026-40998
Spring Web Services: Jaxp13 XPath XXE via StreamSource and SAXSource
Media
CVE-2026-40997
Spring Web Services: SOAP security faults leak Spring Security account state
Media
CVE-2026-40986
Spring Web Flow JS RemotingHandler renders non-HTML Response as HTML
Media
CVE-2026-40992
Spring Boot's Mail Auto-Configuration Does Not Enable SSL Hostname Verification
Media
CVE-2026-53438
Jenkins: Missing permission check allows unauthorized cancellation of queue items
Media
CVE-2026-53442
Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations
Media
CVE-2026-53437
Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL
Media
CVE-2026-53436
Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL
Media
CVE-2026-53439
Jenkins exposes other users' timezone and view names to users with Overall/Read permission
Alta
CVE-2026-53435
Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation
Media
CVE-2026-53440
Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.