Media
CVE-2025-32952
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.602
Restablecer filtros
Media
CVE-2025-32950
io.jmix.localfs:jmix-localfs has a Path Traversal in Local File Storage
Media
CVE-2025-30373
Graylog's Authenticated HTTP inputs ingest message even if Authorization header is missing or has wrong value
Alta
CVE-2025-31487
The XWiki JIRA extension allows data leak through an XXE attack by using a fake JIRA server
Media
CVE-2025-31728
Jenkins AsakusaSatellite Plugin Does not Mask API Keys via Job Configuration Form
Media
CVE-2025-31727
Jenkins AsakusaSatellite Plugin Stores API Keys Unencrypted in Job `config.xml` Files
Crítica
CVE-2024-56325
Apache Pinot Vulnerable to Authentication Bypass
Baja
CVE-2025-27427
Apache ActiveMQ Artemis User Without Create Address Permissions can Modify Address Routing-Type
Media
CVE-2025-29908
Netty QUIC hash collision DoS attack
Baja
CVE-2024-48944
Apache Kylin Server-Side Request Forgery (SSRF) via `/kylin/api/xxx/diag` Endpoint
Media
CVE-2025-27888
Apache Druid vulnerable to Server-Side Request Forgery, Cross-site Scripting, Open Redirect
Alta
CVE-2024-8616
H2O Vulnerable to Arbitrary File Overwrite
Alta
CVE-2024-8062
H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
Alta
CVE-2024-7765
H2O Vulnerable to Denial of Service (DoS) via Large GZIP Parsing
Alta
CVE-2024-6854
H2O Vulnerable to Arbitrary File Overwrite via File Export
Media
CVE-2024-6863
H2O Vulnerable to Execution of Arbitrary Files
Alta
CVE-2024-10572
H2O Vulnerable to Denial of Service (DoS) and File Write
Alta
CVE-2024-10550
H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
Alta
CVE-2025-29925
XWiki allows unregistered users to access private pages information through REST endpoint
Baja
CVE-2025-30197
Jenkins Zoho QEngine Plugin Displays Unmasked API Keys
Baja
CVE-2025-27496
Snowflake JDBC Driver client-side encryption key in DEBUG logs
Media
ghsa-47qw-ccjm-9c2c
LocalS3 XML Parser Vulnerable to XML External Entity (XXE) Injection
Media
ghsa-v232-254c-m6p7
LocalS3 Project Vulnerable to XML External Entity (XXE) Injection via Bucket Tagging API
Media
ghsa-2466-4485-4pxj
LocalS3 Project Bucket Operations Vulnerable to XML External Entity (XXE) Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.