Crítica
CVE-2024-23636
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 546
Restablecer filtros
Alta
CVE-2024-22233
Spring Framework server Web DoS Vulnerability
Alta
CVE-2024-21651
XWiki vulnerable to Denial of Service attack through attachments
Alta
CVE-2023-49280
Data leak of password hash through change requests
Alta
CVE-2022-41678
Apache ActiveMQ Deserialization of Untrusted Data vulnerability
Crítica
CVE-2023-46732
XWiki Platform vulnerable to reflected cross-site scripting through revision parameter in content menu
Alta
CVE-2023-39913
Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability
Media
CVE-2023-46120
RabbitMQ Java client's Lack of Message Size Limitation leads to Remote DoS Attack
Media
Explotada en ataques
CVE-2023-44487
HTTP/2 Stream Cancellation Attack
Alta
ghsa-86q5-qcjc-7pv4
Presto JDBC Server-Side Request Forgery by nextUri
Alta
ghsa-xm7x-f3w2-4hjm
Presto JDBC Server-Side Request Forgery by redirect
Alta
CVE-2023-4759
Arbitrary File Overwrite in Eclipse JGit
Media
CVE-2023-42503
Apache Commons Compress denial of service vulnerability
Media
CVE-2023-41327
WireMock Controlled Server Side Request Forgery vulnerability through URL
Media
CVE-2023-41046
Velocity execution without script right through VelocityCode and VelocityWiki property
Alta
CVE-2023-40572
XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action
Alta
CVE-2022-46751
Apache Ivy External Entity Reference vulnerability
Crítica
CVE-2023-38647
Deserialization vulnerability in Helix workflow and REST
Alta
CVE-2023-37460
Arbitrary File Creation in AbstractUnArchiver
Alta
CVE-2023-28754
Apache ShardingSphere-Agent Deserialization of Untrusted Data vulnerability
Media
CVE-2023-37476
OpenRefine vulnerable to zip slip in project import
Media
CVE-2023-37943
Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
Crítica
CVE-2023-31066
Apache InLong has Files or Directories Accessible to External Parties in Apache InLong
Baja
CVE-2023-41044
Graylog server has partial path traversal vulnerability in Support Bundle feature
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.