Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtroskeycloak-core discloses system properties
Keycloak vulnerable to infinite loop based Denial of Service
Improper Authentication in org.keycloak:keycloak-core
Moderate severity vulnerability that affects org.keycloak:keycloak-core
keycloak-core vulnerable to timing attacks against JWS token verification
Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core
Spring Security and Spring Framework may not recognize certain paths that should be protected
Files or Directories Accessible to External Parties in org.springframework:spring-core
Pivotal Spring Framework DoS Attack with XML Input
Moderate severity vulnerability that affects org.springframework:spring-core
Spring Framework has Improperly Implemented Security Check for Standard
Possible privilege escalation in org.springframework:spring-core
Path Traversal in org.springframework:spring-core
Spring Framework allows applications to expose STOMP over WebSocket endpoints
Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass
Denial of Service in org.springframework:spring-core
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core
Remote code execution occurs in Apache Solr
There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files
There is a XML external entity expansion (XXE) vulnerability in Apache Solr
XML external entity expansion in org.apache.solr:solr-core
Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal
Moderate severity vulnerability that affects org.apache.mesos:mesos
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.