Alta
CVE-2020-35510
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Media
CVE-2020-1729
Permissions bypass in SmallRye
Media
CVE-2022-27216
Passwords stored in plain text by Jenkins dbCharts Plugin
Media
CVE-2022-27217
Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin
Alta
CVE-2022-27210
CSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials
Baja
CVE-2022-27206
Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
Media
CVE-2022-27218
Personal tokens stored in plain text by Jenkins incapptic connect uploader Plugin
Alta
CVE-2022-27211
CSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials
Alta
CVE-2022-24721
Improper Authorization in org.cometd.oort
Media
CVE-2022-26520
pgjdbc Arbitrary File Write Vulnerability
Alta
CVE-2021-38296
Authentication Bypass by Capture-replay in Apache Spark
Crítica
CVE-2022-0839
Improper Restriction of XML External Entity Reference in Liquibase
Alta
CVE-2021-38266
Liferay Portal and Liferay DXP fails to properly import users from LDAP
Media
CVE-2021-38263
Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console
Media
CVE-2021-38264
Liferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter
Media
CVE-2021-38265
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)
Media
CVE-2022-25146
Liferay Portal and Liferay DXP fails to check origin of event messages
Crítica
CVE-2022-23899
SQL injection in net.mingsoft:ms-mcms
Crítica
CVE-2022-23898
SQL injection in net.mingsoft:ms-mcms
Alta
CVE-2021-41193
Use of Externally-Controlled Format String in wire-avs
Media
CVE-2022-24948
Cross-site Scripting in Apache JSPWiki
Alta
CVE-2022-24947
Cross Site Request Forgery in Apache JSPWiki
Media
CVE-2022-24329
Improper Locking in JetBrains Kotlin
Alta
CVE-2022-24614
Allocation of Resources Without Limits or Throttling in metadata-extractor
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.