Alta
CVE-2026-22444
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Alta
CVE-2026-22022
Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin
Baja
CVE-2025-14083
Keycloak Admin REST API exposes backend schema and rules
Media
CVE-2025-14559
Keycloak services allows the issuance of access and refresh tokens for disabled users
Baja
CVE-2026-1035
Keycloak does not validate and update refresh token usage atomically
Crítica
CVE-2025-64087
XDocReport affected by a Server-Side Template Injection (SSTI) vulnerability
Crítica
CVE-2025-65482
XDocReport affected by an XML External Entity (XXE) vulnerability
Media
CVE-2026-1180
Keycloak’s OpenID Connect Dynamic Client Registration feature affected by Server-Side Request Forgery (SSRF)
Media
CVE-2025-59355
Apache Linkis: Password Exposure
Alta
CVE-2025-29847
Apache Linkis: Arbitrary File Read via Double URL Encoding Bypass
Media
CVE-2026-1050
risesoft-y9 Digital-Infrastructure has a SQL injection vulnerability
Media
CVE-2025-15104
Nu Html Checker (vnu) contains a Server-Side Request Forgery (SSRF) vulnerability
Baja
CVE-2026-0858
PlantUML is vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams
Media
CVE-2026-1002
Vert.x Web static handler component cache can be manipulated to deny the access to static files
Baja
CVE-2026-0976
Keycloak has an improper input validation vulnerability
Media
CVE-2025-66169
Apache Camel camel-neo4j component is vulnerable to cypher injection
Alta
CVE-2025-68931
Jervis's AES CBC Mode is Without Authentication
Media
CVE-2025-68925
Jervis Has a JWT Algorithm Confusion Vulnerability
Alta
CVE-2025-68704
Jervis Has Weak Random for Timing Attack Mitigation
Alta
CVE-2025-68703
Jervis's Salt for PBKDF2 derived from password
Alta
CVE-2025-68702
Jervis Has a SHA-256 Hex String Padding Bug
Alta
CVE-2025-68701
Jervis has Deterministic AES IV Derivation from Passphrase
Alta
CVE-2025-68698
Jervis Has a RSA PKCS#1 Padding Vulnerability
Alta
CVE-2025-68493
Apache Struts 2 is Missing XML Validation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.