Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 529
Restablecer filtrosOpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure
OpenTelemetry.Sampler.AWS & OpenTelemetry.Resources.AWS have unbounded HTTP response body reads
OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers
OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling
OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies
Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege
OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle
MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade
OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path
Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)
ChilliCream GraphQL Platform: Utf8GraphQLParser Stack Overflow via Deeply Nested GraphQL Documents
MsQuic has a Remote Elevation of Privilege Vulnerability
DotNetNuke.Core security code analysis rules triggered
ImageMagick has a memory leak in PNG encoder when writing a MNG image
Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability
ImageMagick has a heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds
Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters
EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory
AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction
ImageMagick: META reader memory leak in the APP1JPEG input path
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.