Media
CVE-2026-106450
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 437
Restablecer filtros
Alta
CVE-2026-89425
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)
Alta
CVE-2026-89407
jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()
Media
CVE-2026-69190
Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards
Alta
CVE-2026-81875
HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of service
Alta
CVE-2026-63126
Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)
Alta
CVE-2026-63490
Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass
Media
CVE-2026-55867
Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens
Alta
CVE-2026-55841
Fortigate syslog message parser can be exploited to modify or delete fields from the original message
Media
CVE-2026-55425
Graylog Server: System Catalog titles endpoint can be used to retrieve values of protected database fields
Media
CVE-2026-55547
Yamcs's Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration
Alta
CVE-2026-55521
Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities
Crítica
CVE-2026-76904
GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
Media
CVE-2026-61799
netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash
Alta
CVE-2026-61798
netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages
Media
CVE-2026-63336
RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM
Alta
CVE-2026-69219
RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation
Alta
CVE-2026-69220
RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
Media
CVE-2026-56818
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state
Media
CVE-2026-54081
veraPDF Parser DoS via PostScript Type 1 Font Programs
Media
CVE-2026-54080
veraPDF Parser DoS via PostScript CMap Streams
Media
CVE-2026-59949
LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges
Media
CVE-2026-59899
Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service
Alta
CVE-2026-56822
Netty: TOCTOU in OcspServerCertificateValidator
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.