Crítica
CVE-2023-40177
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Media
CVE-2023-40176
XWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayer
Alta
CVE-2023-39106
Nacos Spring vulnerable to Unsafe Deserialization
Alta
CVE-2022-46751
Apache Ivy External Entity Reference vulnerability
Media
CVE-2023-40037
Apache NiFi Insufficient Property Validation vulnerability
Crítica
CVE-2023-37914
XWiki Platform privilege escalation (PR)/RCE from account through Invitation subject/message
Media
CVE-2023-40315
OpenNMS privilege escalation vulnerability
Alta
CVE-2023-36106
PowerJob incorrect access control vulnerability
Alta
CVE-2023-40313
OpenNMS vulnerable to remote code execution
Media
CVE-2023-38905
Jeecg-boot SQL Injection vulnerability
Media
CVE-2023-40344
Jenkins Delphix Plugin missing permission check
Media
CVE-2023-40345
Jenkins Delphix Plugin vulnerable to exposure of system-scoped credentials
Media
CVE-2023-40339
Jenkins Config File Provider Plugin improper credential masking vulnerability
Media
CVE-2023-40340
Jenkins NodeJS Plugin improper credential masking vulnerability
Media
CVE-2023-40348
Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure
Alta
CVE-2023-40350
Jenkins Docker Swarm Plugin stored cross-site scripting vulnerability
Baja
CVE-2023-40343
Jenkins Tuleap Authentication Plugin non-constant time token comparison
Alta
CVE-2023-40346
Jenkins Shortcut Job Plugin stored cross-site scripting vulnerability
Alta
CVE-2023-40342
Jenkins Flaky Test Handler Plugin stored cross-site scripting vulnerability
Media
CVE-2023-40351
Jenkins Favorite View Plugin cross-site request forgery vulnerability
Media
CVE-2023-40349
Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure
Media
CVE-2023-40341
Jenkins Blue Ocean Plugin cross-site request forgery vulnerability
Media
CVE-2023-40347
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials
Alta
CVE-2023-40336
Jenkins Folders Plugin cross-site request forgery vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.