Alta
CVE-2026-39304
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Alta
CVE-2026-22750
Spring Cloud Gateway's SSL bundle configuration silently bypassed
Alta
CVE-2026-34487
Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File
Alta
CVE-2026-34483
Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve
Alta
Explotada en ataques
CVE-2026-34486
Apache Tomcat Missing Encryption of Sensitive Data vulnerability
Media
CVE-2026-34500
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
Alta
CVE-2026-24880
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability
Media
CVE-2026-25854
Apache Tomcat has an Open Redirect vulnerability
Alta
CVE-2026-29146
Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor
Media
CVE-2026-32990
Apache Tomcat has an Improper Input Validation vulnerability
Crítica
CVE-2026-29145
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
Alta
CVE-2026-29129
Apache Tomcat: Configured cipher preference order not preserved
Media
CVE-2026-40046
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT vulnerable to Integer Overflow or Wraparound
Alta
CVE-2026-34020
Apache OpenMeetings Uses GET Request Method With Sensitive Query Strings
Media
CVE-2026-33005
Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerability
Alta
CVE-2026-33266
Apache OpenMeetings Uses Hard-coded Cryptographic Key
Alta
CVE-2025-62188
Apache DolphinScheduler vulnerable to sensitive information disclosure
Media
CVE-2026-40180
quarkus-openapi-generator extension has Zip Slip Path Traversal in ApicurioCodegenWrapper class
Alta
CVE-2026-33229
XWiki vulnerable to remote code execution with script right through unprotected Velocity scripting API
Media
CVE-2026-35583
Emissary has a Path Traversal via Blacklist Bypass in Configuration API
Alta
CVE-2026-35581
Emissary has a Command Injection via PLACE_NAME Configuration in Executrix
Crítica
CVE-2026-35580
Emissary has GitHub Actions Shell Injection via Workflow Inputs
Media
CVE-2026-5739
PowerJob's GroovyEvaluator.evaluate endpoint vulnerable to code injection
Media
CVE-2026-5736
PowerJob vulnerable to SQL injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.