Alta
CVE-2026-7307
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.280
Restablecer filtros
Media
CVE-2026-37981
Keycloak Account Resources user lookup contains broken access control
Media
CVE-2026-37982
Keycloak: Unauthorized account takeover via WebAuthn token replay
Media
CVE-2026-37979
Keycloak: Information disclosure via OIDC token introspection endpoint audience bypass
Media
CVE-2026-8922
Keycloak: Revoked Tokens Can Remain Active When Both Realm-Level and Client-Level `notBefore` Revocation Policies are Configured
Media
CVE-2026-8830
Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation
Alta
CVE-2026-45367
HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
Alta
CVE-2026-45300
async-http-client: Cookie header not stripped on cross-origin redirect
Alta
CVE-2026-45609
Spring AI MCP Security: Unvalidated URL Fetching (SSRF)
Media
CVE-2026-8771
org.linlinjava:litemall-wx-api has an Injection issue
Media
CVE-2026-8759
Beetl's SpELFunction extension function has an expression injection risk
Alta
CVE-2026-45575
Improper Verification of Cryptographic Signature in com.oviva.telematik:epa4all-client
Alta
CVE-2026-45574
epa4all-client: TLS Certificate Validation Disabled in Production
Media
CVE-2026-45292
OpenTelemetry Java SDK has Unbounded Memory Allocation in W3C Baggage Propagation
Crítica
CVE-2026-8178
Amazon Redshift Vulnerable to Remote Code Execution via Unsafe Class Loading
Crítica
CVE-2026-45083
Goobi viewer - Core: Unauthenticated Solr Streaming Expression Proxy
Crítica
CVE-2026-33117
Security feature bypass vulnerability in Azure Key Vault Keys library for Java
Alta
CVE-2026-41284
Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling
Crítica
CVE-2026-43515
Apache Tomcat - Security constraints not correctly applied
Crítica
CVE-2026-45091
sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)
Alta
CVE-2026-41712
Spring AI: ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage
Alta
CVE-2026-41713
Spring AI: Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor
Crítica
CVE-2026-27478
Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation
Alta
CVE-2026-44516
Valtimo has sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.