Media
CVE-2026-54777
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.120
Restablecer filtros
Media
CVE-2026-54776
CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade
Media
CVE-2026-54775
CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.
Alta
CVE-2026-54774
CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate
Media
CVE-2026-54773
CoreWCF: WS-Security signature substitution via document-wide Signature lookup
Alta
CVE-2026-54772
CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake
Media
CVE-2026-55254
NCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluation
Media
CVE-2026-45491
Microsoft Security Advisory CVE-2026-45491 – .NET Tampering Vulnerability
Alta
CVE-2026-45591
Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability
Alta
CVE-2026-48109
MessagePack's LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input
Alta
CVE-2026-47761
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection
Alta
CVE-2026-47762
TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments
Alta
CVE-2026-47759
TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes
Alta
CVE-2026-47760
TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs
Media
ghsa-92vj-hp7m-gwcj
Nerdbank.MessagePack has Inefficient CPU Computation
Media
ghsa-qjvr-435c-5fjh
Nerdbank.MessagePack has a memory amplification DoS in collection deserialization
Media
CVE-2026-47166
ImageMagick: Heap Buffer Over-Read in distributed pixel cache server
Media
CVE-2026-47165
ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model
Media
CVE-2026-46693
ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking
Media
CVE-2026-46692
ImageMagick: Heap Buffer Over-Write in distributed pixel cache server
Baja
CVE-2026-56369
ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse
Baja
CVE-2026-56363
ImageMagick: Division by Zero in binomial kernel
Media
ghsa-jqq5-8px3-9m6m
ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix
Media
CVE-2026-46609
Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.