Baja
CVE-2023-32263
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Media
CVE-2023-32262
Exposure of system-scoped credentials in Jenkins Dimensions Plugin
Media
CVE-2023-32261
Missing permission check in Jenkins Dimensions Plugin allows enumerating credentials IDs
Crítica
CVE-2023-34034
Access Control Bypass in Spring Security
Alta
CVE-2023-28754
Apache ShardingSphere-Agent Deserialization of Untrusted Data vulnerability
Media
CVE-2023-0105
Keycloak: Impersonation and lockout possible through incorrect handling of email trust
Media
CVE-2023-37476
OpenRefine vulnerable to zip slip in project import
Alta
CVE-2023-34035
Spring Security's authorization rules can be misconfigured when using multiple servlets
Media
CVE-2023-34036
Spring HATEOAS vulnerable to Improper Neutralization of HTTP Headers for Scripting Syntax
Crítica
CVE-2023-26512
rabbitmq-connector plugin module in Apache EventMesh platforms allows attackers to send controlled message
Crítica
CVE-2023-37462
org.xwiki.platform:xwiki-platform-skin-ui Eval Injection vulnerability
Alta
CVE-2023-38286
Spring-boot-admin sandbox bypass via crafted HTML
Media
CVE-2023-3635
Okio Signed to Unsigned Conversion Error vulnerability
Media
CVE-2023-37959
Jenkins Sumologic Publisher Plugin missing permission check
Alta
CVE-2023-37961
Jenkins Assembla Auth Plugin vulnerable to cross-site request forgery
Media
CVE-2023-37960
Jenkins MathWorks Polyspace Plugin vulnerable to arbitrary file read
Alta
CVE-2023-37962
Jenkins Benchmark Evaluator Plugin vulnerable to cross-site request forgery
Media
CVE-2023-37963
Jenkins Benchmark Evaluator Plugin missing permission check
Alta
CVE-2023-37958
Jenkins Sumologic Publisher Plugin vulnerable to cross-site request forgery
Media
CVE-2023-37965
Jenkins ElasticBox CI Plugin missing permission check
Alta
CVE-2023-37964
Jenkins ElasticBox CI Plugin vulnerable to cross-site request forgery
Media
CVE-2023-37944
Jenkins Datadog Plugin does not perform a permission check in an HTTP endpoint.
Media
CVE-2023-37954
Jenkins Rebuilder Plugin vulnerable to Cross Site Request Forgery
Media
CVE-2023-37955
Jenkins Test Results Aggregator Plugin vulnerable to Cross Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.