Media
CVE-2020-25633
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Media
CVE-2024-23680
Improper Verification of Cryptographic Signature in aws-encryption-sdk-java
Media
CVE-2021-32643
StaticFile.fromUrl can leak presence of a directory
Baja
CVE-2021-3536
Cross-site Scripting in Wildfly
Media
CVE-2021-29506
Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service.
Alta
CVE-2021-29505
XStream is vulnerable to a Remote Command Execution attack
Alta
CVE-2021-32620
XWiki users registered with email verification can self re-activate their disabled accounts
Alta
CVE-2021-32621
Script injection without script or programming rights through Gadget titles
Crítica
CVE-2021-27582
Autobinding vulnerability in MITREid Connect
Alta
CVE-2021-26715
Server Side Request Forgery (SSRF) in org.mitre:openid-connect-server
Alta
CVE-2021-20222
Code injection in keycloak
Media
CVE-2021-21430
Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code
Crítica
CVE-2021-21428
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator
Alta
CVE-2021-22112
Privilege escalation in spring security
Alta
CVE-2021-27905
Server-Side Request Forgery in Apache Solr
Crítica
CVE-2021-23369
Remote code execution in handlebars when compiling templates
Alta
CVE-2021-31409
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Media
CVE-2020-5421
Improper Input Validation in Spring Framework
Alta
CVE-2018-11765
Improper Authentication in Apache Hadoop
Media
CVE-2020-10687
HTTP Request Smuggling in Undertow
Alta
CVE-2020-10705
Allocation of Resources Without Limits or Throttling in Undertow
Media
CVE-2021-21429
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin
Alta
CVE-2021-29441
Authentication bypass for specific endpoint
Media
CVE-2021-28168
Local information disclosure via system temporary directory
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.