Crítica
CVE-2023-26055
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Crítica
CVE-2023-26472
XWiki Platform vulnerable to privilege escalation via async macro and IconThemeSheet from the user profile
Crítica
CVE-2023-26474
XWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author
Alta
CVE-2023-26476
XWiki Platform packages Expose Sensitive Information to an Unauthorized Actor
Media
CVE-2023-26473
Unprivileged XWiki Platform users can make arbitrary select queries using DatabaseListProperty and suggest.vm
Alta
CVE-2023-0264
Keycloak vulnerable to user impersonation via stolen UUID code
Crítica
CVE-2023-26475
xwiki-platform vulnerable to Remote Code Execution in Annotations
Media
CVE-2022-1274
HTML Injection in Keycloak Admin REST API
Alta
CVE-2022-4137
Keycloak Cross-site Scripting on OpenID connect login service
Media
CVE-2022-1438
Keycloak vulnerable to Cross-site Scripting
Baja
CVE-2023-0481
RestEasy Reactive implementation of Quarkus allows Creation of Temporary File With Insecure Permissions
Media
ghsa-9vx8-f5c4-862x
XML External Entity (XXE) vulnerability in apoc.import.graphml
Crítica
CVE-2022-4492
Undertow client not checking server identity presented by server certificate in https connections
Media
CVE-2023-0044
Cross-site Scripting in Quarkus
Media
CVE-2023-0869
Cross Site Scripting in OpenNMS
Media
CVE-2023-0868
OpenNMS Meridian and Horizon vulnerable to Cross-site Scripting
Media
CVE-2023-0867
OpenNMS Meridian and Horizon vulnerable to Cross-site Scripting
Media
CVE-2023-0815
OpenNMS has potential Insertion of Sensitive Information into Log File vulnerability
Media
CVE-2023-25621
Improper Privilege Management in Apache Sling
Alta
CVE-2023-25570
Apollo has potential access control security issue in eureka
Media
CVE-2023-25569
apollo-portal has potential CSRF issue
Media
CVE-2023-0846
OpenNMS Horizon and Meridian vulnerable to Cross-site Scripting
Crítica
CVE-2023-25158
GeoTools OGC Filter SQL Injection Vulnerabilities
Crítica
CVE-2023-25157
GeoServer OGC Filter SQL Injection Vulnerabilities
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.