Alta
CVE-2026-69219
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 546
Restablecer filtros
Alta
CVE-2026-69220
RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
Alta
CVE-2026-53752
docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
Media
CVE-2026-56818
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state
Media
CVE-2026-53573
core-geonetwork has an Open Redirect Bypass
Alta
CVE-2026-50559
Quarkus: Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities
Media
CVE-2026-54081
veraPDF Parser DoS via PostScript Type 1 Font Programs
Media
CVE-2026-54080
veraPDF Parser DoS via PostScript CMap Streams
Alta
CVE-2026-54078
veraPDF Validation XXE via Rich Text
Alta
CVE-2026-54079
veraPDF Validation XXE via XFA
Alta
CVE-2026-43910
java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor
Crítica
CVE-2026-73644
OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check
Crítica
ghsa-68r5-9hpg-7qw9
OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway
Media
CVE-2026-8384
Eclipse Jetty: Path parameter traversal
Media
CVE-2026-6790
Eclipse Jetty: HTTP Authority/Host mismatch
Media
CVE-2026-10051
Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections
Media
CVE-2026-59921
Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
Media
CVE-2026-59920
Netty: STOMP CONNECT Frame Header Injection in Netty
Media
CVE-2026-59919
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address
Alta
CVE-2026-56822
Netty: TOCTOU in OcspServerCertificateValidator
Alta
CVE-2026-56821
Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
Alta
CVE-2026-56820
Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
Alta
CVE-2026-68494
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
Alta
CVE-2026-54076
ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.