Alta
CVE-2026-44241
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 361
Restablecer filtros
Alta
CVE-2026-42440
Apache OpenNLP AbstractModelReader has an OOM Denial of Service via Unbounded Array Allocation
Crítica
CVE-2026-40076
OpenMRS Module Upload Vulnerable to Path Traversal (Zip Slip)
Alta
CVE-2026-40075
OpenMRS ModuleResourcesServlet has Path Traversal that Leads to Arbitrary File Read
Crítica
CVE-2026-42778
Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41409 Incomplete Fix)
Crítica
CVE-2026-42779
Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41635 Incomplete Fix)
Crítica
CVE-2026-41409
Apache MINA Vulnerable to Deserialization of Untrusted Data (CVE-2024-52046 Incomplete Fix)
Crítica
CVE-2026-41635
Apache MINA vulnerable to Deserialization of Untrusted Data
Crítica
CVE-2026-40860
Apache camel-jms, camel-sjms, camel-sjms2 and camel-amqp: Unsafe Deserialization of JMS ObjectMessage
Alta
CVE-2026-41166
OpenRemote has Improper Access Control via updateUserRealmRoles function
Media
CVE-2026-22747
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
Media
CVE-2026-41245
Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix
Media
CVE-2026-34164
Valtimo: Sensitive data exposure through inbox message logging in InboxHandlingService
Alta
CVE-2026-40882
OpenRemote has XXE in Velbus Asset Import
Crítica
CVE-2026-39842
Expression Injection in OpenRemote
Media
CVE-2026-33929
Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code
Media
CVE-2026-40180
quarkus-openapi-generator extension has Zip Slip Path Traversal in ApicurioCodegenWrapper class
Crítica
CVE-2026-33728
dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution
Alta
CVE-2025-70952
pf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names
Alta
CVE-2025-67030
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method
Alta
CVE-2026-33001
Jenkins has a link following vulnerability allows arbitrary file creation
Alta
CVE-2026-22729
JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter
Baja
CVE-2026-2741
Vaadin: Specially crafted ZIP archives can escape the intended extraction directory
Media
CVE-2026-23907
Apache PDFBox has Path Traversal through PDComplexFileSpecification.getFilename() function
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.