Alta
CVE-2024-36115
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 310
Restablecer filtros
Media
CVE-2024-39031
Silverpeas Core Cross-site Scripting vulnerability
Media
CVE-2023-35701
Apache Hive Code Injection vulnerability
Alta
CVE-2024-28848
OpenMetadata vulnerable to a SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` (`GHSL-2023-236`)
Alta
CVE-2024-28847
OpenMetadata vulnerable to a SpEL Injection in `PUT /api/v1/events/subscriptions` (`GHSL-2023-251`)
Crítica
CVE-2024-28253
OpenMetadata vulnerable to SpEL Injection in `PUT /api/v1/policies` (`GHSL-2023-252`)
Alta
CVE-2021-22573
google-oauth-java-client improperly verifies cryptographic signature
Media
CVE-2024-23821
GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2024-23819
GeoServer's MapML HTML Page vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2024-23818
GeoServer's WMS OpenLayers Format vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2024-23643
GeoServer's GWC Seed Form vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2024-23642
GeoServer's Simple SVG Renderer vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2024-23640
GeoServer's Style Publisher vulnerable to Stored Cross-Site Scripting (XSS)
Media
CVE-2023-51445
Stored Cross-Site Scripting (XSS) vulnerability in GeoServer's REST Resources API
Crítica
CVE-2024-26580
Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability
Media
CVE-2023-50378
Apache Ambari: Various Cross site scripting problems
Crítica
CVE-2023-47795
Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting
Crítica
CVE-2024-26266
Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting
Crítica
CVE-2023-40191
Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting
Crítica
CVE-2024-25601
Liferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting
Crítica
CVE-2024-25602
Liferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting
Alta
CVE-2024-23114
Deserialization of Untrusted Data in Apache Camel CassandraQL
Crítica
CVE-2024-25610
Liferay Portal has a Stored XSS with Blog entries (Insecure defaults)
Alta
CVE-2023-29055
Apache Kylin has Insufficiently Protected Credentials
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.