Media
CVE-2023-46131
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Alta
CVE-2023-37544
Apache Pulsar WebSocket Proxy contains an Improper Authentication vulnerability
Alta
CVE-2023-50732
Velocity execution without script right through tree macro
Media
CVE-2023-6134
Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri
Crítica
CVE-2023-50723
Remote code execution/programming rights with configuration section from any user account
Crítica
CVE-2023-50722
XSS/CSRF Remote Code Execution in XWiki.ConfigurableClass
Crítica
CVE-2023-50721
Remote code execution from account through SearchAdmin
Media
CVE-2023-50720
Solr search discloses email addresses of users
Alta
CVE-2023-50719
Solr search discloses password hashes of all users
Crítica
CVE-2023-49898
Apache StreamPark: Authenticated system users could trigger remote command execution
Media
CVE-2023-30867
Apache StreamPark: Authenticated system users could trigger SQL injection vulnerability
Media
CVE-2023-6836
WSO2 products vulnerable to XML External Entity attack
Alta
CVE-2023-6563
Allocation of Resources Without Limits in Keycloak
Media
CVE-2023-50768
Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability
Media
CVE-2023-50769
Jenkins Nexus Platform Plugin missing permission check
Media
CVE-2023-50777
Tokens stored in plain text by PaaSLane Estimate Plugin
Media
CVE-2023-50770
Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin
Media
CVE-2023-50776
Tokens stored in plain text by PaaSLane Estimate Plugin
Media
CVE-2023-50772
Tokens stored in plain text by Dingding JSON Pusher Plugin
Media
CVE-2023-50773
Displayed in plain text by Dingding JSON Pusher Plugin
Alta
CVE-2023-47326
Cross Site Request Forgery in Silverpeas
Baja
CVE-2023-47320
Broken access control in Silverpeas
Crítica
CVE-2023-50422
Improper JWT Signature Validation in SAP Security Services Library
Media
CVE-2023-49487
Cross-site Scripting in JFinalCMS
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.