Alta
CVE-2026-59955
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Alta
CVE-2026-59954
Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching
Media
CVE-2025-32781
Apollo Portal: There is a risk of unauthorized access to the Apollo configuration center
Media
CVE-2026-49844
Apache Log4j API: Improper encoding of non-finite floating-point values during MapMessage JSON serialization
Alta
CVE-2026-49485
org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
Media
ghsa-q6gh-6v2r-hjv3
Micronaut: DefaultHttpClient follows redirects, forwarding Authorization, Cookie, and Proxy-Authorization headers
Alta
CVE-2026-49464
NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak
Media
CVE-2026-49463
NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries
Media
CVE-2026-49833
DSpace: Path Traversal is possible through LDN message generation
Media
CVE-2026-49830
DSpace: ORE resource URI does not validate scheme for non-web resources
Media
CVE-2026-49831
DSpace has a possible Path Traversal Vulnerability in its Curation Task Reporter output path
Alta
CVE-2026-49832
DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN
Alta
CVE-2024-7768
H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
Alta
CVE-2026-34151
XWiki Platform Old Core: Resource path traversal via /skin/ action endpoint in Jetty 12+
Baja
CVE-2023-41329
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
Media
CVE-2023-32732
gRPC connection termination issue
Alta
CVE-2023-1428
gRPC Reachable Assertion issue
Alta
CVE-2023-32731
Connection confusion in gRPC
Alta
CVE-2026-62238
OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export
Alta
CVE-2026-54640
OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory
Alta
CVE-2026-54641
OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl
Alta
CVE-2026-49042
Apache Camel-Langchain4j-Tools: Tool argument headers are not filtered against declared parameters
Media
CVE-2026-56139
Apache Camel-Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body
Media
CVE-2026-49098
Apache Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.