Alta
CVE-2026-45609
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Media
CVE-2026-8771
org.linlinjava:litemall-wx-api has an Injection issue
Media
CVE-2026-8759
Beetl's SpELFunction extension function has an expression injection risk
Alta
CVE-2026-45575
Improper Verification of Cryptographic Signature in com.oviva.telematik:epa4all-client
Alta
CVE-2026-35194
Apache Flink: Remote code execution via SQL injection in code generation
Alta
CVE-2026-45574
epa4all-client: TLS Certificate Validation Disabled in Production
Media
CVE-2026-45292
OpenTelemetry Java SDK has Unbounded Memory Allocation in W3C Baggage Propagation
Crítica
CVE-2026-8178
Amazon Redshift Vulnerable to Remote Code Execution via Unsafe Class Loading
Media
CVE-2026-45205
Apache Commons Configuration: StackOverflowError for YAML input with cycles
Crítica
CVE-2026-45083
Goobi viewer - Core: Unauthenticated Solr Streaming Expression Proxy
Crítica
CVE-2026-44672
Mapfish Print: Remote Code Injection (RCE) in Dynamic table
Crítica
CVE-2026-33117
Security feature bypass vulnerability in Azure Key Vault Keys library for Java
Alta
CVE-2026-41284
Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling
Baja
CVE-2026-43514
Apache Tomcat - AJP secret compared in non-constant time
Crítica
CVE-2026-43512
Apache Tomcat - Digest authenticator will authenticate any unknown user
Alta
CVE-2026-43513
Apache Tomcat: LockOutRealm treats user names as case-sensitive
Crítica
CVE-2026-43515
Apache Tomcat - Security constraints not correctly applied
Alta
CVE-2026-42498
Apache Tomcat - WebSocket authentication header exposure
Crítica
CVE-2026-41293
Apache Tomcat - HTTP/2 request headers not validated
Crítica
CVE-2026-45091
sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)
Alta
CVE-2026-41712
Spring AI: ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage
Alta
CVE-2026-41713
Spring AI: Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor
Crítica
CVE-2026-27478
Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation
Alta
CVE-2026-44516
Valtimo has sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.