Media
CVE-2024-25151
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Crítica
CVE-2023-40191
Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting
Alta
CVE-2024-25606
Liferay Portal has an XXE vulnerability in Java2WsddTask._format
Media
CVE-2024-25150
Liferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel
Media
CVE-2024-25149
Liferay Portal and Liferay DXP Does Not Properly Restrict Membership to Child Site Based on Parent Site Options
Alta
CVE-2024-1635
Undertow Uncontrolled Resource Consumption Vulnerability
Alta
CVE-2024-23833
OpenRefine JDBC Attack Vulnerability
Alta
CVE-2023-50386
Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets
Alta
CVE-2023-50291
Apache Solr can leak certain passwords due to System Property redaction logic inconsistencies
Baja
CVE-2023-50292
Apache Solr Schema Designer blindly "trusts" all configsets
Media
CVE-2024-23639
Micronaut management endpoints vulnerable to drive-by localhost attack
Media
CVE-2023-47798
Liferay Portal's account lockout does not invalidate existing user sessions
Media
CVE-2024-24823
Graylog session fixation vulnerability through cookie injection
Alta
CVE-2024-24824
Graylog vulnerable to instantiation of arbitrary classes triggered by API request
Media
CVE-2023-39196
Apache Ozone Improper Authentication vulnerability
Alta
CVE-2023-51437
Apache Pulsar SASL Authentication Provider observable timing discrepancy vulnerability
Media
CVE-2024-23635
Malicious input can provoke XSS when preserving comments
Crítica
CVE-2024-1143
Central Dogma Authentication Bypass Vulnerability via Session Leakage
Media
CVE-2024-24565
CrateDB database has an arbitrary file read vulnerability
Alta
CVE-2023-51982
CrateDB authentication bypass vulnerability
Alta
CVE-2023-29055
Apache Kylin has Insufficiently Protected Credentials
Alta
CVE-2023-6267
Quarkus Improper Handling of Insufficient Permissions or Privileges and Improper Handling of Exceptional Conditions vulnerability
Crítica
Explotada en ataques
CVE-2024-23897
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
Alta
CVE-2024-23898
Cross-site WebSocket hijacking vulnerability in the Jenkins CLI
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.