Crítica
CVE-2023-42497
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 437
Restablecer filtros
Alta
CVE-2023-36478
HTTP/2 HPACK integer overflow and buffer allocation
Alta
CVE-2023-43642
snappy-java's missing upper bound check on chunk length can lead to Denial of Service (DoS) impact
Crítica
CVE-2023-42276
hutool Buffer Overflow vulnerability
Crítica
CVE-2023-36480
Aerospike Java Client vulnerable to unsafe deserialization of server responses
Media
CVE-2023-3426
Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions
Baja
CVE-2023-41044
Graylog server has partial path traversal vulnerability in Support Bundle feature
Baja
CVE-2023-41045
Graylog vulnerable to insecure source port usage for DNS queries
Baja
CVE-2023-41041
Graylog user session is still usable after logout
Alta
CVE-2023-34455
snappy-java's unchecked chunk length leads to DoS
Media
CVE-2023-34454
snappy-java's Integer Overflow vulnerability in compress leads to DoS
Media
CVE-2023-34453
snappy-java's Integer Overflow vulnerability in shuffle leads to DoS
Media
CVE-2023-35029
Liferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module
Alta
CVE-2023-35030
Liferay Portal and Liferay DXP Vulnerable to CSRF via the Layout Module
Media
CVE-2023-3193
Liferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module
Media
CVE-2023-33950
Liferay Portal has Inefficient Regular Expression
Media
CVE-2023-33947
Liferay portal has unauthorized access to object definition via search
Media
CVE-2023-33949
Insecure Default Initialization In Liferay Portal
Media
CVE-2023-33946
Liferay portal unauthorized access to objects via OAuth 2 scope
Alta
CVE-2023-33945
SQL injection in Liferay Portal
Media
CVE-2023-33944
Cross-site scripting in Liferay Portal
Alta
CVE-2023-33948
Missing authorization in Liferay portal
Media
CVE-2023-33943
Cross-site scripting in Liferay Portal
Media
CVE-2023-33938
Cross-site scripting in Liferay Portal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.