Alta
CVE-2026-22731
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Media
CVE-2026-22737
Spring Framework Improper Path Limitation with Script View Templates
Crítica
CVE-2026-33180
HAPI FHIR HTTP authentication leak in redirects
Alta
CVE-2026-33166
Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers)
Alta
CVE-2026-33001
Jenkins has a link following vulnerability allows arbitrary file creation
Alta
CVE-2026-33002
Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation
Media
CVE-2026-33004
Jenkins LoadNinja Plugin does not mask LoadNinja API keys displayed on the job configuration form
Media
CVE-2026-33003
Jenkins LoadNinja Plugin stores LoadNinja API keys unencrypted in job config.xml files
Alta
CVE-2026-22730
SQL Injection in Spring AI MariaDBFilterExpressionConverter
Alta
CVE-2026-22729
JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter
Media
CVE-2026-2575
Keycloak: Denial of Service due to excessive SAMLRequest decompression
Alta
CVE-2026-2603
Keycloak: Unauthorized authentication via disabled SAML Identity Provider
Alta
CVE-2026-33012
Micronaut Framework vulnerable to a Denial of Service in HTML error response caching
Alta
CVE-2026-33013
Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indices
Alta
CVE-2025-54920
Apache Spark: Spark History Server Code Execution Vulnerability
Crítica
CVE-2026-25534
Spinnaker clouddriver and orca URL validation bypass via underscores in hostnames
Media
CVE-2025-60012
Apache Livy: Restrict file access
Media
CVE-2025-66249
Apache Livy: Unauthorized directory access
Baja
CVE-2026-2366
Keycloak vulnerable to authorization bypass via the Admin API
Media
CVE-2026-3429
Keycloak: Improper Access Control Leading to MFA Deletion and Account Takeover in Keycloak Account REST API
Baja
CVE-2026-3911
Keycloak: Information disclosure of disabled user attributes via administrative endpoint
Baja
CVE-2026-2741
Vaadin: Specially crafted ZIP archives can escape the intended extraction directory
Media
CVE-2026-2742
Vaadin Vulnerable to Authentication Bypass When Accessing the /VAADIN Endpoint Without a Trailing Slash
Media
CVE-2026-23907
Apache PDFBox has Path Traversal through PDComplexFileSpecification.getFilename() function
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.