Media
CVE-2026-83557
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 65
Restablecer filtros
Alta
CVE-2026-81876
HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service
Alta
CVE-2026-81875
HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of service
Alta
CVE-2026-63202
netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding
Media
CVE-2026-54081
veraPDF Parser DoS via PostScript Type 1 Font Programs
Media
CVE-2026-54080
veraPDF Parser DoS via PostScript CMap Streams
Media
CVE-2026-54082
veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs
Alta
CVE-2026-56822
Netty: TOCTOU in OcspServerCertificateValidator
Alta
CVE-2026-56821
Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
Alta
CVE-2026-56820
Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
Alta
CVE-2026-68494
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
Media
CVE-2025-32781
Apollo Portal: There is a risk of unauthorized access to the Apollo configuration center
Alta
CVE-2026-49485
org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
Alta
CVE-2026-54513
jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)
Alta
CVE-2026-54512
jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation
Alta
CVE-2026-55470
HAPI FHIR: Incomplete fix for CVE-2026-45367: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS
Crítica
CVE-2026-50627
Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token Validator
Alta
CVE-2026-45367
HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
Alta
CVE-2026-44900
epa4all-client has a VAU Signature bypass
Alta
CVE-2026-42579
Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)
Media
CVE-2026-22748
Spring Security has Potential Security Misconfiguration when Using withIssuerLocation
Crítica
CVE-2026-33557
Apache Kafka does not validate JWT tokens in its OAUTHBEARER authentication implementation
Crítica
CVE-2026-34361
FHIR Validator HTTP service has SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft
Media
CVE-2026-34360
FHIR Validator: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probing
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.