Alta
CVE-2025-53114
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.072
Restablecer filtros
Media
CVE-2026-53438
Jenkins: Missing permission check allows unauthorized cancellation of queue items
Media
CVE-2026-53442
Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations
Media
CVE-2026-53437
Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL
Media
CVE-2026-53436
Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL
Media
CVE-2026-53439
Jenkins exposes other users' timezone and view names to users with Overall/Read permission
Alta
CVE-2026-53435
Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation
Media
CVE-2026-53440
Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"
Alta
CVE-2026-53441
Jenkins: Stored XSS vulnerability in node offline cause description
Media
CVE-2026-47838
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
Media
CVE-2026-41721
Spring Data Commons: Denial of Service via excessive memory allocation in projection binding
Media
CVE-2026-41719
Spring Data KeyValue: Remote code execution via SpEL Injection in Sort-based repository queries
Media
CVE-2026-41730
Spring Data REST potentially exposes persistence-layer internals to HTTP clients
Media
CVE-2026-41727
Spring for Apache Kafka: Improper Validation of Retry Topic Header Values Leads to Retry Sequence Manipulation
Alta
CVE-2026-41732
Spring for Apache Pulsar: JsonPulsarHeaderMapper Trusted-Package Prefix Check Allows Unintended Subpackage Deserialization
Alta
CVE-2026-41728
Spring Data REST has Improper Access Control in its JSON Patch Implementation
Alta
CVE-2026-41729
Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch requests
Media
CVE-2026-41837
Spring Data REST Querydsl Integration Exposes Persistent Property Paths, Bypassing Jackson Customizations
Media
CVE-2026-41726
In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header
Alta
CVE-2026-41731
In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization
Media
CVE-2026-41711
Spring Data Commons: StackOverflowException when parsing Sort parameters (DoS)
Media
CVE-2026-41706
Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache
Alta
CVE-2026-41716
Spring Data Commons: Heap exhaustion from unbounded property-lookup cache retaining crafted string keys
Alta
CVE-2026-41003
Spring Security SAML2 Service Provider: RelyingPartyRegistration may run arbitrary code on HTML forms generated by Spring Security filters
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.