Media
CVE-2025-49128
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Media
CVE-2025-49009
Para Inserts Sensitive Information into Log File for Facebook authentication
Alta
CVE-2025-27531
Apache InLong Deserialization of Untrusted Data Vulnerability
Alta
CVE-2025-5806
Jenkins Gatling Plugin Vulnerable to Cross-Site Scripting (XSS)
Media
CVE-2025-35036
Hibernate Validator may interpolate user-supplied input in a constraint violation message with Expression Language
Media
CVE-2025-46548
Pekko Management may not properly apply authenticator when Basic Authentication is enabled
Media
CVE-2025-45855
Erupt Unrestricted Upload of File with Dangerous Type vulnerability
Media
CVE-2024-8008
WSO2 products vulnerable to Cross-site Scripting
Media
CVE-2024-1440
WSO2 is vulnerable to Open Redirect through multi-option URL in its authentication endpoint
Media
CVE-2025-48955
Para Server Logs Sensitive Information
Media
CVE-2024-7096
WSO2 products vulnerable to privilege escalation due to business logic flaw in SOAP admin services
Alta
CVE-2025-41235
Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies
Baja
CVE-2025-46701
Apache Tomcat - CGI security constraint bypass
Alta
CVE-2025-48734
Apache Commons Improper Access Control vulnerability
Alta
CVE-2025-48881
Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users
Media
CVE-2025-27528
Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read
Media
CVE-2025-27526
Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass
Alta
CVE-2025-27522
Apache InLong: JDBC Vulnerability during verification processing
Baja
CVE-2025-48382
Fess has Insecure Temporary File Permissions
Media
CVE-2025-4949
Eclipse JGit XML External Entity (XXE) Vulnerability
Media
CVE-2025-48063
XWiki Platform Security Authorization Bridge allows users with just edit right can enforce required rights with programming right
Crítica
CVE-2025-41232
Spring Security authorization bypass for method security annotations on private methods
Baja
CVE-2025-22233
Spring Framework DataBinder Case Sensitive Match Exception
Alta
CVE-2025-47889
Jenkins WSO2 Oauth Plugin Fails to Properly Authenticate User Credentials
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.