Media
CVE-2025-53622
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Media
CVE-2025-53621
DSpace is vulnerable to XML External Entity injection during archive imports
Media
CVE-2025-48795
Apache CXF is vulnerable to DoS attacks as entire files are read into memory and logged
Crítica
CVE-2025-53836
XWiki Rendering is vulnerable to RCE attacks when processing nested macros
Crítica
CVE-2025-53835
XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax
Alta
CVE-2025-53689
Apache Jackrabbit vulnerable to blind XXE attack due to insecure document build
Alta
CVE-2024-41169
Apache Zeppelin exposes server resources to unauthenticated attackers
Alta
CVE-2025-30402
ExecuTorch vulnerable to Heap-based Buffer Overflow attack
Media
CVE-2025-48924
Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs
Media
CVE-2025-53864
Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON
Alta
CVE-2025-53506
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams
Media
CVE-2025-52434
Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector
Alta
CVE-2025-52520
Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits
Media
CVE-2025-53675
Jenkins Warrior Framework Plugin vulnerability exposes unencrypted passwords to certain authenticated users
Baja
CVE-2025-53678
Jenkins User1st uTester Plugin vulnerability exposes unencrypted token to authenticated users
Media
CVE-2025-53742
Jenkins Applitools Eyes Plugin vulnerability exposes unencrypted keys to certain authenticated users
Media
CVE-2025-53743
Jenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form
Media
CVE-2025-53676
Jenkins Xooa Plugin vulnerability exposes unencrypted tokens to authenticated users
Media
CVE-2025-53669
Jenkins VAddy Plugin vulnerability exposes plaintext keys on its job configuration form
Media
CVE-2025-53677
Jenkins Xooa Plugin vulnerability does not mask its Xooa Deployment Token
Media
CVE-2025-53664
Jenkins Apica Loadtest Plugin vulnerability exposes authentication tokens
Media
CVE-2025-53656
Jenkins ReadyAPI Functional Testing Plugin vulnerability stores unencrypted authentication credentials
Media
CVE-2025-53673
Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens in its global configuration file
Media
CVE-2025-53674
Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.