Alta
CVE-2025-24814
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Media
CVE-2025-24363
HL7 FHIR IG Publisher potentially exposes GitHub repo user and credential information
Alta
CVE-2024-52807
XXE vulnerability in XSLT parsing in `org.hl7.fhir.publisher`
Media
CVE-2025-24402
CSRF vulnerability in Jenkins Azure Service Fabric Plugin
Alta
CVE-2025-24399
Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
Media
CVE-2025-23366
HAL Console has a Cross Site Scripting (XSS) vulnerability of user input
Media
CVE-2023-0482
Insecure Temporary File in RESTEasy
Media
CVE-2024-45627
Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability
Crítica
CVE-2025-23025
XWiki Realtime WYSIWYG Editor extension allows privilege escalation (PR) through realtime WYSIWYG editing
Media
CVE-2024-11734
Denial of Service in Keycloak Server via Security Headers
Media
CVE-2025-23026
jte's HTML templates containing Javascript template strings are subject to XSS
Baja
CVE-2024-56512
Apache NiFi: Missing Complete Authorization for Parameter and Service References
Alta
CVE-2024-12744
Amazon Redshift JDBC Driver vulnerable to SQL Injection
Crítica
CVE-2024-52046
Apache MINA Deserialization RCE Vulnerability
Media
ghsa-64gp-r758-8pfm
Cross Site Scripting (XSS) vulnerability while uploading content to a new deployment
Alta
CVE-2024-23945
Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails
Alta
CVE-2024-38819
Spring Framework Path Traversal vulnerability
Baja
CVE-2024-56128
Apache Kafka's SCRAM implementation Incorrectly Implements Authentication Algorithm
Media
CVE-2024-12539
Elasticsearch Incorrect Authorization vulnerability
Media
CVE-2024-35230
Welcome and About GeoServer pages communicate version and revision information
Alta
CVE-2024-55887
Ucum-java has an XXE vulnerability in XML parsing
Crítica
CVE-2024-55662
XWiki allows remote code execution through the extension sheet
Alta
CVE-2024-55663
XWiki Platform has an SQL injection in getdocuments.vm with sort parameter
Crítica
CVE-2024-55875
http4k has a potential XXE (XML External Entity Injection) vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.