Media
CVE-2023-30530
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.602
Restablecer filtros
Baja
CVE-2023-30528
Jenkins WSO2 Oauth Plugin does not mask the WSO2 Oauth client secret on the global configuration form
Baja
CVE-2023-30527
Jenkins WSO2 Oauth Plugin stores WSO2 Oauth client secret unencrypted in global config.xml file on Jenkins controller
Media
CVE-2023-30523
Jenkins Report Portal Plugin allows users with Item/Extended Read permission to view tokens on Jenkins controller
Media
CVE-2023-30531
Jenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencrypted
Alta
CVE-2023-26269
Apache James server's JMX management service vulnerable to privilege escalation by local user
Media
CVE-2023-28675
Jenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connections
Alta
CVE-2023-28681
Jenkins Visual Studio Code Metrics Plugin vulnerable to XML external entity (XXE) attacks
Alta
CVE-2023-28680
Jenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks
Media
CVE-2023-28674
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
Alta
CVE-2023-28683
Jenkins Phabricator Differential Plugin vulnerable to XML external entity (XXE) attacks
Alta
CVE-2023-28684
Jenkins remote-jobs-view-plugin vulnerable to XML external entity attacks
Alta
CVE-2023-28682
Jenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks
Alta
CVE-2023-27025
RuoYi vulnerable to arbitrary file download
Crítica
CVE-2023-27162
OpenAPI Generator vulnerable to Server-Side Request Forgery
Crítica
CVE-2023-28462
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
Alta
CVE-2023-0100
Improper Input Validation In Eclipse BIRT
Alta
CVE-2023-27480
XWiki Platform vulnerable to data leak via Improper Restriction of XML External Entity Reference
Crítica
CVE-2023-26477
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
Media
ghsa-9vx8-f5c4-862x
XML External Entity (XXE) vulnerability in apoc.import.graphml
Crítica
CVE-2022-4492
Undertow client not checking server identity presented by server certificate in https connections
Crítica
CVE-2023-25158
GeoTools OGC Filter SQL Injection Vulnerabilities
Crítica
CVE-2023-25157
GeoServer OGC Filter SQL Injection Vulnerabilities
Media
CVE-2023-23926
XML External Entity (XXE) vulnerability in apoc.import.graphml
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.