Baja
CVE-2025-48382
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Media
CVE-2025-48063
XWiki Platform Security Authorization Bridge allows users with just edit right can enforce required rights with programming right
Baja
CVE-2025-22233
Spring Framework DataBinder Case Sensitive Match Exception
Alta
CVE-2025-47889
Jenkins WSO2 Oauth Plugin Fails to Properly Authenticate User Credentials
Crítica
CVE-2025-47884
Jenkins OpenID Connect Provider Plugin Incorrectly Validates Crafted Build ID Tokens
Crítica
CVE-2025-4641
BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference
Media
CVE-2025-46551
JRuby-OpenSSL has hostname verification disabled by default
Alta
CVE-2025-46827
Graylog Allows Session Takeover via Insufficient HTML Sanitization
Media
CVE-2025-27533
Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation
Media
CVE-2025-2901
HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store
Crítica
CVE-2025-45616
BRCC Incorrect Access Control vulnerability
Crítica
CVE-2025-46558
org.xwiki.contrib.markdown:syntax-markdown-commonmark12 vulnerable to XSS via Markdown content
Alta
CVE-2025-46557
Any user with view access to the XWiki space can change the authenticator
Media
CVE-2025-46554
XWiki missing authorization when accessing the wiki level attachments list and metadata via REST API
Crítica
CVE-2025-32974
org.xwiki.platform:xwiki-platform-security-requiredrights-default required rights analysis doesn't consider TextAreas with default content type
Crítica
CVE-2025-32973
org.xwiki.platform:xwiki-platform-component-wiki provides no warning when granting XWiki.ComponentClass programming right
Baja
CVE-2025-32971
Solr script service doesn't take dropped programming right into account
Media
CVE-2025-32970
org.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerability
Media
CVE-2025-31650
Apache Tomcat Denial of Service via invalid HTTP priority header
Baja
CVE-2025-31651
Apache Tomcat Rewrite rule bypass
Alta
CVE-2025-22235
Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed
Media
CVE-2025-3985
Apereo CAS has inefficient regular expression complexity
Media
CVE-2025-3986
Apereo CAS has inefficient regular expression complexity
Baja
CVE-2025-3984
Apereo CAS code injection vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.