Baja
CVE-2023-25500
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Media
CVE-2023-35925
FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption
Crítica
CVE-2023-35161
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page
Crítica
CVE-2023-35160
XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template
Crítica
CVE-2023-35159
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template
Crítica
CVE-2023-35158
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template
Alta
CVE-2023-35157
XWiki Platform vulnerable to reflected cross-site scripting via delattachment action
Crítica
CVE-2023-35156
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template
Alta
CVE-2022-24839
org.nokogiri:nekohtml vulnerable to Uncontrolled Resource Consumption
Media
CVE-2023-33725
Broadleaf vulnerable to Cross-site Scripting
Alta
CVE-2023-34981
Apache Tomcat vulnerable to information leak
Crítica
CVE-2023-34340
Apache Accumulo Improper Authentication vulnerability
Alta
CVE-2023-35166
XWiki Platform vulnerable to privilege escalation (PR) from account through TipsPanel
Crítica
CVE-2023-35162
XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template
Alta
CVE-2023-35155
XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email
Crítica
CVE-2023-35153
XWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parameters
Crítica
CVE-2023-35152
XWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults
Alta
CVE-2023-35151
XWiki Platform may show email addresses in clear in REST results
Crítica
CVE-2023-35150
XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application
Alta
CVE-2023-34467
XWiki Platform may retrieve email addresses of all users
Media
CVE-2023-34466
XWiki Platform's tags on non-viewable pages can be revealed to users
Crítica
CVE-2023-34465
XWiki Platform's Mail.MailConfig can be edited by any user with edit rights
Crítica
CVE-2023-34464
XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template
Media
CVE-2023-34462
netty-handler SniHandler 16MB allocation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.