Crítica
CVE-2026-50627
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.601
Restablecer filtros
Alta
CVE-2025-27511
GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection
Media
CVE-2026-40986
Spring Web Flow JS RemotingHandler renders non-HTML Response as HTML
Media
CVE-2026-40992
Spring Boot's Mail Auto-Configuration Does Not Enable SSL Hostname Verification
Alta
CVE-2026-40987
Spring Integration File Support: FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem
Alta
CVE-2025-53114
Acknowledgement extension out of memory
Media
CVE-2026-41706
Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache
Media
CVE-2026-41008
Spring Security OAuth2 Authorization Server: Authorization endpoint performs insufficient validation of the request_uri parameter
Media
CVE-2026-41854
Spring Framework Server-Side Request Forgery via UriComponentsBuilder
Alta
CVE-2026-40983
Micrometer gRPC server instrumentation DoS
Alta
CVE-2026-40984
Micrometer HTTP server instrumentations DoS
Alta
CVE-2026-47691
Netty has Insufficient Bailiwick Validation for NS Records
Media
CVE-2026-47244
Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced
Alta
CVE-2026-44894
Netty's Default QUIC token handler accepts any client-supplied token
Alta
CVE-2026-44892
Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size
Alta
CVE-2026-44890
Netty has Unbounded Direct Memory Consumption in its RedisDecoder
Alta
CVE-2026-44250
Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays
Baja
CVE-2026-11477
hsweb-framework has an open redirect issue
Baja
CVE-2026-10532
Logback vulnerable to Object Injection through HardenedObjectInputStream modules
Media
CVE-2026-49328
Apache Fesod is vulnerable to Server-Side Request Forgery through its UrlImageConverter component
Alta
CVE-2026-48827
Apache MINA SSHD bundle sshd-git has a path traversal vulnerability
Media
CVE-2026-46605
Apache ActiveMQ server has an incomplete authorization workflow
Alta
CVE-2026-49361
Apache Fluss: Unauthenticated remote attackers can exhaust JVM heap memory using crafted frame headers via TabletServer/CoordinatorServer
Alta
CVE-2026-35563
Apache Directory LDAP API lacks server certificate verification for LDAP hostnames
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.