Media
CVE-2026-41846
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Baja
CVE-2026-41848
Spring Framework Denial of Service via AntPathMatcher
Alta
CVE-2026-41855
Spring Framework Unsafe Deserialization via Jackson JMS Converters
Media
CVE-2026-41854
Spring Framework Server-Side Request Forgery via UriComponentsBuilder
Media
CVE-2026-41847
Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL
Alta
CVE-2026-41849
Spring Framework Denial of Service via Integer Overflow in SpEL Expressions
Media
CVE-2026-41841
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux
Alta
CVE-2026-41720
Spring LDAP has Authentication Bypass with Empty Password
Media
CVE-2026-41840
Spring Framework Denial of Service via Multipart Requests in WebFlux
Alta
CVE-2026-41845
Spring Framework Cross-site Scripting via JavaScriptUtils
Alta
CVE-2026-41842
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux
Media
CVE-2026-41844
Spring Framework Open Redirect in Spring MVC and WebFlux
Media
CVE-2026-41843
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux
Media
CVE-2026-41839
Spring Framework Escalation via Session Fixation in WebFlux
Media
CVE-2026-41715
Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect
Media
CVE-2026-41710
Spring Retry has Cache Exhaustion in Stateful Retries that leads to Denial of Service
Media
CVE-2026-41838
Spring Framework Predictable Session ID in WebSocket Module
Alta
CVE-2026-41007
Spring HATEOAS heap exhaustion through unbounded internal caching
Alta
CVE-2026-41006
Spring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configuration
Alta
CVE-2026-40983
Micrometer gRPC server instrumentation DoS
Alta
CVE-2026-40984
Micrometer HTTP server instrumentations DoS
Media
CVE-2016-20063
Simple Personal Message <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-11590
Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated SQL Injection
Alta
CVE-2017-20249
Apptha Slider Gallery <= 1.0 - Unauthenticated SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.