Alta
CVE-2026-106113
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 28
Restablecer filtros
Alta
CVE-2026-106117
ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp
Alta
CVE-2026-100369
CliInvoke: Argument Injection in Extensibility Runner Factory
Media
CVE-2026-48512
MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement
Alta
CVE-2026-43938
YAFNET has Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header
Media
CVE-2026-42191
OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter
Crítica
CVE-2026-40372
Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege
Media
CVE-2026-41511
OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle
Baja
ghsa-7jxj-rpx7-ph2c
Umbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp
Media
CVE-2026-23952
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
Media
CVE-2026-23874
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
Media
CVE-2025-62171
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)
Baja
CVE-2025-57807
ImageMagick BlobStream Forward-Seek Under-Allocation
Alta
CVE-2025-55154
imagemagick: integer overflows in MNG magnification
Alta
CVE-2025-55004
imagemagick: heap-buffer overflow read in MNG magnification with alpha
Baja
CVE-2025-53014
ImageMagick has a Heap Buffer Overflow in InterpretImageFilename
Crítica
CVE-2025-24895
AspNetCore Remote Authenticator for CIE3.0 Allows SAML Response Signature Verification Bypass
Crítica
CVE-2025-24894
The AspNetCore Remote Authenticator for SPID Allows SAML Response Signature Verification Bypass
Media
CVE-2024-51987
HTTP Client uses incorrect token after refresh
Alta
CVE-2024-43485
Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability
Media
CVE-2023-49289
Ajax Pro Cross-site Scripting
Media
CVE-2023-45814
Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free
Alta
CVE-2023-30626
Directory traversal + file write causing arbitrary code execution
Crítica
CVE-2022-23535
LiteDB may deserialize bad JSON on object type using _type
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.