Alta
CVE-2026-33524
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 437
Restablecer filtros
Alta
CVE-2026-35582
Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix
Alta
ghsa-2m67-wjpj-xhg9
Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsers
Crítica
CVE-2026-34361
FHIR Validator HTTP service has SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft
Alta
CVE-2026-33013
Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indices
Media
CVE-2026-18401
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition
Media
CVE-2026-28208
Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix
Media
CVE-2026-24819
weixin4j has Improperly Controlled Sequential Memory Allocation
Alta
CVE-2026-21452
MessagePack for Java Vulnerable to Remote DoS via Malicious EXT Payload Allocation
Alta
CVE-2025-3586
Liferay Portal and DXP Instance Admin can execute code using Objects Actions and Validations
Media
CVE-2025-62275
Liferay Portal and DXP do not check permissions of images in a blog entry
Media
CVE-2025-62276
Liferay Portal and DXP use an incorrect cache-control header
Media
CVE-2025-62267
Liferay Portal and DXP affected by multiple cross-site scripting (XSS) vulnerabilities in web content template’s select structure page
Media
CVE-2025-62264
Liferay Portal Vulnerable to Reflected XSS via the selectedLanguageId Parameter
Media
CVE-2025-62265
Liferay Portal is vulnerable to XSS in the Blogs widget
Media
CVE-2025-62266
Liferay Portal is vulnerable to DNS rebinding attacks
Media
CVE-2025-62257
Liferay Portal vulnerable to password enumeration
Alta
CVE-2025-62260
Liferay Portal Vulnerable to DoS via Crafted Headless API Request
Alta
CVE-2025-62258
Liferay Portal Vulnerable to CSRF in Headless APIs
Media
CVE-2025-62259
Liferay Portal Does Not Limit Access to APIs Before Email Verification
Media
CVE-2025-62261
Liferay Portal Stores Password Reset Tokens in Plain Text
Media
CVE-2025-62262
Liferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature
Media
CVE-2025-62263
Liferay Portal Vulnerable to Cross-Site Scripting
Media
CVE-2025-62253
Liferay Portal Vulnerable to Open Redirect via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.