Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2585▼ 302 respecto a la semana anterior

Críticas / altas1355▲ 99 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-10751	Pendiente de análisis	Alta (7.5)	0.37%	—	IBM MQ^AI IBM MQ Java Client^AI IBM MQ JMS Client^AI	18/9/2026	21/9/2026	IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling.
CVE-2020-36282	Modificada	Crítica (9.8)	2.8%	—	Rabbitmq JMS Client	12/3/2021	17/6/2026	JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data.
CVE-2016-4974	Modificada	Alta (7.5)	6.2%	—	Apache Amqp 0-X JMS Client Apache JMS Client Amqp	13/7/2016	17/6/2026	Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a crafted serialized…
CVE-2014-0924	Modificada	Media (4.6)	1.1%	—	IBM Messagesight JMS Client IBM Messagesight	15/4/2014	17/6/2026	IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 does not verify that all of the characters of a password are correct, which makes it easier for remote authenticated users to bypass intended access restrictions by leveraging knowledge of a password substring.
CVE-2014-0923	Modificada	Media (4.3)	1.4%	—	IBM Messagesight JMS Client IBM Messagesight	15/4/2014	17/6/2026	IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon restart) via crafted MQ Telemetry Transport (MQTT) authentication data.
CVE-2014-0922	Modificada	Media (4.3)	1.3%	—	IBM Messagesight JMS Client IBM Messagesight	15/4/2014	17/6/2026	IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (resource consumption) via WebSockets MQ Telemetry Transport (MQTT) data.
CVE-2014-0921	Modificada	Media (4.3)	1.3%	—	IBM Messagesight JMS Client IBM Messagesight	15/4/2014	17/6/2026	The server in IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon crash and message data loss) via malformed headers during a WebSockets connection upgrade.