Baja
CVE-2023-41041
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 546
Restablecer filtros
Media
CVE-2023-33201
Bouncy Castle For Java LDAP injection vulnerability
Crítica
CVE-2023-36471
org.xwiki.commons:xwiki-commons-xml's HTML sanitizer allows form elements in restricted
Alta
CVE-2023-35155
XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email
Crítica
CVE-2023-34465
XWiki Platform's Mail.MailConfig can be edited by any user with edit rights
Crítica
CVE-2023-35042
GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language
Alta
Explotada en ataques
CVE-2023-32315
Administration Console authentication bypass in openfire xmppserver
Alta
CVE-2023-32977
Jenkins Pipeline: Job Plugin vulnerable to stored Cross-site Scripting
Media
CVE-2023-32981
Jenkins Pipeline Utility Steps Plugin arbitrary file write vulnerability
Crítica
CVE-2023-32071
XWiki Platform vulnerable to RXSS via editor parameter - importinline template
Alta
CVE-2023-25827
Cross Site Scripting in OpenTSDB
Crítica
CVE-2023-29528
Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml
Crítica
CVE-2023-29510
Code injection via unescaped translations in xwiki-platform
Baja
CVE-2023-26049
Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies
Crítica
CVE-2023-29210
org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability
Media
CVE-2023-28640
Apiman vulnerable to permissions bypass due to missing check on API key URL
Alta
CVE-2023-0100
Improper Input Validation In Eclipse BIRT
Alta
CVE-2023-28465
HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057
Crítica
CVE-2023-27479
org.xwiki.platform:xwiki-platform-panels-ui vulnerable to Eval Injection
Media
CVE-2023-26056
xwiki contains Incorrect Authorization
Crítica
CVE-2023-25158
GeoTools OGC Filter SQL Injection Vulnerabilities
Crítica
CVE-2023-25157
GeoServer OGC Filter SQL Injection Vulnerabilities
Alta
CVE-2024-23681
Arbitrary code execution in de.tum.in.ase:artemis-java-test-sandbox
Media
CVE-2022-25881
http-cache-semantics < 4.1.1 - Regular Expression Denial of Service (ReDoS)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.