Baja
CVE-2026-37977
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 546
Restablecer filtros
Crítica
CVE-2026-34361
FHIR Validator HTTP service has SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft
Media
CVE-2026-34360
FHIR Validator: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probing
Alta
CVE-2026-34359
HAPI FHIR Core has Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect
Alta
CVE-2026-28369
Undertow is Vulnerable to HTTP Request/Response Smuggling
Alta
CVE-2026-33870
Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
Alta
CVE-2026-22733
Spring Boot has an Authentication Bypass under Actuator CloudFoundry endpoints
Alta
CVE-2026-22731
Spring Boot has an Authentication Bypass under Actuator Health groups paths
Alta
CVE-2026-33001
Jenkins has a link following vulnerability allows arbitrary file creation
Alta
CVE-2025-54920
Apache Spark: Spark History Server Code Execution Vulnerability
Alta
CVE-2026-3047
Keycloak SAML Broken has Authentication Bypass by Primary Weakness
Crítica
CVE-2026-27446
Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions
Media
CVE-2026-28208
Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix
Alta
CVE-2026-1529
Keycloak affected by improper invitation token validation
Media
CVE-2026-24128
XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages
Baja
CVE-2025-14083
Keycloak Admin REST API exposes backend schema and rules
Crítica
CVE-2025-65091
XWiki Full Calendar Macro vulnerable to SQL injection through Calendar.JSONService
Alta
CVE-2026-22244
OpenMetadata's Server-Side Template Injection (SSTI) in FreeMarker email templates leads to RCE
Media
CVE-2025-66560
Quarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write
Alta
CVE-2025-61916
Spinnaker vulnerable to SSRF due to improper restrictions on http from user input
Alta
CVE-2025-3586
Liferay Portal and DXP Instance Admin can execute code using Objects Actions and Validations
Media
CVE-2025-14518
PowerJob has a server-side request forgery vulnerability in PingPongUtils.java
Media
CVE-2025-66472
XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication
Alta
CVE-2025-66623
Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.