Media
CVE-2022-2712
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 546
Restablecer filtros
Media
CVE-2022-25901
cookiejar Regular Expression Denial of Service via Cookie.parse function
Crítica
CVE-2023-22457
XWiki CKEditor.HTMLConverter vulnerable to Remote Code Execution via Cross-Site Request Forgery
Crítica
CVE-2022-40145
Apache Karaf vulnerable to potential code injection
Alta
CVE-2022-1471
SnakeYaml Constructor Deserialization Remote Code Execution
Alta
CVE-2022-45868
Password exposure in H2 Database
Media
CVE-2022-41935
Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui
Media
CVE-2022-41933
Plaintext storage of password after a reset in org.xwiki.platform:xwiki-platform-security-authentication-default
Crítica
CVE-2022-41928
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml
Alta
CVE-2022-45379
Whole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions
Crítica
CVE-2022-37865
Apache Ivy does not verify target path when extracting the archive
Alta
CVE-2022-32287
Apache UIMA Path Traversal vulnerability
Media
CVE-2022-39259
Jadx-gui vulnerable to swing HTML Denial of Service (DoS) attack
Alta
CVE-2022-43407
CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin
Alta
CVE-2022-43408
Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins
Crítica
CVE-2022-39312
MySQL JDBC deserialization vulnerability
Crítica
CVE-2022-42889
Arbitrary code execution in Apache Commons Text
Alta
CVE-2022-39248
matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion
Alta
CVE-2022-39243
NuProcess vulnerable to command-line injection through insertion of NUL character(s)
Media
CVE-2022-33681
Apache Pulsar Java Client vulnerable to Improper Certificate Validation
Alta
CVE-2022-31166
XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups
Alta
CVE-2022-36091
XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor
Alta
CVE-2022-26049
Goomph before 3.37.2 allows malicious zip file to write contents to arbitrary locations
Alta
CVE-2022-28220
Apache James vulnerable to buffering attack
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.