Alta
CVE-2026-106113
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 62
Restablecer filtros
Alta
CVE-2026-106118
ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write
Alta
CVE-2026-105796
Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators
Alta
CVE-2026-100369
CliInvoke: Argument Injection in Extensibility Runner Factory
Alta
CVE-2026-85756
SSH.NET: ScpClient allows server-side RCE via default SCP path handling
Crítica
CVE-2026-75513
Marten's LINQ provider has SQL injection via unescaped string literals
Media
CVE-2026-62899
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
Alta
CVE-2026-59859
Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator
Alta
CVE-2026-59861
Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator
Crítica
CVE-2026-45288
Marten has an injection vulnerability in its full-text search regConfig parameter
Alta
CVE-2026-43938
YAFNET has Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header
Media
CVE-2026-42191
OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter
Media
CVE-2026-40894
OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers
Media
CVE-2026-33536
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
Media
CVE-2023-1289
ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS
Media
CVE-2026-30227
MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery
Media
CVE-2026-26983
ImageMagick: Invalid MSL <map> can result in a use after free
Media
CVE-2026-25797
ImageMagick: Code Injection via PostScript header in ps coders
Crítica
CVE-2026-25592
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK
Baja
CVE-2025-67290
Piranha has stored cross-site scripting (XSS) vulnerability
Crítica
CVE-2025-55315
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability
Media
CVE-2025-59821
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
Alta
CVE-2025-57803
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
Alta
CVE-2025-55298
ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.