Alta
CVE-2025-14874
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 546
Restablecer filtros
Alta
CVE-2025-55749
XWiki Jetty Package (XJetty) allows accessing any application file through URL
Baja
CVE-2025-13805
NutzBoot vulnerable to deserialization
Media
CVE-2025-64139
Jenkins Start Windocks Containers Plugin is missing a permission check
Media
CVE-2025-64138
Jenkins Start Windocks Containers Plugin vulnerable to cross-site request forgery
Alta
CVE-2025-11419
Keycloak TLS Client-Initiated Renegotiation Denial of Service
Media
CVE-2025-62710
Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl
Baja
CVE-2025-11966
Vert.x-Web vulnerable to Stored Cross-site Scripting in directory listings via file names
Media
CVE-2025-11965
Vert.x-Web Access Control Flaw in StaticHandler’s Hidden File Protection for Files Under Hidden Directories
Alta
CVE-2025-47410
Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system
Alta
CVE-2025-59419
Netty has SMTP Command Injection Vulnerability that Allows Email Forgery
Media
CVE-2025-11581
PowerJob OpenAPIController is missing authorization
Baja
CVE-2025-1396
WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled
Media
CVE-2025-59822
Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section
Media
CVE-2025-59154
Openfire has potential identity spoofing issue via unsafe CN parsing
Media
ghsa-c7v7-rqfm-f44j
Vaadin Platform possible file bypass via upload validation on the server-side
Media
ghsa-94g8-xv23-7656
Vaadin Flow Components possible file bypass via upload validation on the server-side
Media
CVE-2025-9467
Vaadin Framework possible file bypass via upload validation on the server-side
Media
CVE-2025-58057
Netty's decoders vulnerable to DoS via zip bomb style attack
Baja
CVE-2025-55202
Opencast has a partial path traversal vulnerability in UI config
Media
CVE-2025-58049
XWiki PDF export jobs store sensitive cookies unencrypted in job statuses
Alta
CVE-2025-26467
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)
Media
CVE-2025-53622
DSpace is vulnerable to Path Traversal attacks when importing packages using Simple Archive Format
Media
CVE-2025-53621
DSpace is vulnerable to XML External Entity injection during archive imports
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.