Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.072
Restablecer filtrosImproper Authorization in org.apache.hbase:hbase
Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-main
Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client
Improper Input Validation in net.sf.robocode:robocode.host allows for external service interaction
Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
jackson-databind Deserialization of Untrusted Data vulnerability
Improper Privilege Management in org.apache.hadoop:hadoop-main
Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf
Apache Commons Compress vulnerable to denial of service due to infinite loop
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running t
Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL
Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation
Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core
Critical severity vulnerability that affects org.apache.solr:solr-core
spring-security-oauth and spring-security-oauth2 Open Redirect vulnerability
Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle
Improper Input Validation in Apache Qpid Broker-J
Unauthenticated Remote Code Execution in Apache JMeter
Stack Overflow in Apache Mesos
Incomplete List of Disallowed Inputs in SOFA-Hessian
Moderate severity vulnerability that affects org.b3log:symphony
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.