Alta
CVE-2024-7765
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Alta
CVE-2024-6854
H2O Vulnerable to Arbitrary File Overwrite via File Export
Media
CVE-2024-6863
H2O Vulnerable to Execution of Arbitrary Files
Alta
CVE-2024-10572
H2O Vulnerable to Denial of Service (DoS) and File Write
Alta
CVE-2024-10550
H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
Alta
CVE-2024-10549
H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
Crítica
CVE-2024-10553
H2O Deserialization of Untrusted Data Vulnerability
Alta
CVE-2025-29926
The WikiManager REST API allows any user to create wikis
Alta
CVE-2025-29925
XWiki allows unregistered users to access private pages information through REST endpoint
Alta
CVE-2025-29924
XWiki uses the wrong wiki reference in AuthorizationManager
Alta
CVE-2025-30196
Jenkins AnchorChain Plugin Has a Cross-Site Scripting (XSS) Vulnerability
Baja
CVE-2025-27496
Snowflake JDBC Driver client-side encryption key in DEBUG logs
Media
CVE-2025-1391
Improper Authorization in Keycloak Organization Mapper Allows Unauthorized Organization Claims
Media
ghsa-47qw-ccjm-9c2c
LocalS3 XML Parser Vulnerable to XML External Entity (XXE) Injection
Media
ghsa-v232-254c-m6p7
LocalS3 Project Vulnerable to XML External Entity (XXE) Injection via Bucket Tagging API
Media
ghsa-2466-4485-4pxj
LocalS3 Project Bucket Operations Vulnerable to XML External Entity (XXE) Injection
Media
CVE-2025-27136
LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection
Media
CVE-2025-27636
Apache Camel: Camel Message Header Injection via Improper Filtering
Alta
CVE-2025-27604
com.xwiki.confluencepro:application-confluence-migrator-pro-ui's application homepage is public
Media
CVE-2025-27624
Jenkins cross-site request forgery (CSRF) vulnerability
Media
CVE-2025-27625
Jenkins Open Redirect vulnerability
Media
CVE-2025-27623
Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission
Media
CVE-2025-27622
Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission
Alta
CVE-2025-27508
Emissary May Use a Broken or Risky Cryptographic Algorithm
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.