Crítica
CVE-2023-49093
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Crítica
CVE-2023-48910
Microcks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download
Media
ghsa-6g3j-p5g6-992f
OpenSearch StackOverflow vulnerability
Crítica
CVE-2023-49371
RuoYi vulnerable to SQL injection vulnerability
Alta
CVE-2023-49735
Apache Tiles: Unvalidated input may lead to path traversal and XXE
Media
CVE-2023-4218
Eclipse IDE XXE in eclipse.platform
Media
CVE-2023-49652
Jenkins Google Compute Engine Plugin has incorrect permission checks
Alta
CVE-2023-46589
Apache Tomcat Improper Input Validation vulnerability
Alta
CVE-2022-41678
Apache ActiveMQ Deserialization of Untrusted Data vulnerability
Media
ghsa-r68h-jhhj-9jvm
Validator.isValidSafeHTML is being deprecated and will be deleted from org.owasp.esapi:esapi in 1 year
Media
CVE-2023-49068
Apache DolphinScheduler Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Media
CVE-2023-33202
Bouncy Castle Denial of Service (DoS)
Media
CVE-2023-47467
Directory Traversal in jeecg-boot
Alta
CVE-2023-48293
Cross-Site Request Forgery with QueryOnXWiki allows arbitrary database queries
Alta
CVE-2023-48241
Whole content of all documents of all wikis exposed to anybody with view right on Solr suggest service
Crítica
CVE-2023-48240
Cookies are sent to external images in rendered diff (and server side request forgery)
Crítica
CVE-2022-46337
Apache Derby: LDAP injection vulnerability in authenticator
Media
CVE-2023-47112
Authenticated users can view job names and groups they do not have authorization to view
Crítica
CVE-2023-6038
H2O local file inclusion vulnerability
Alta
CVE-2023-26031
Apache Hadoop allows local user to gain root privileges
Alta
CVE-2023-5720
Quarkus does not properly sanitize artifacts created from its use of the Gradle plugin, allowing certain build system information to remain
Media
CVE-2023-48088
xxl-job-admin vulnerable to Cross Site Scripting
Media
CVE-2023-48087
xxl-job-admin vulnerable to Insecure Permissions
Alta
CVE-2023-5072
Java: DoS Vulnerability in JSON-JAVA
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.