Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.280
Restablecer filtrosImproper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war
Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-main
Improper Input Validation in net.sf.robocode:robocode.host allows for external service interaction
Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
Improper Privilege Management in org.apache.hadoop:hadoop-main
Apache Commons Compress vulnerable to denial of service due to infinite loop
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation
Exposure of Sensitive Information to an Unauthorized Actor in Hadoop
Apache Thrift Node.js static web server sandbox escape
Improper Authentication in Apache Karaf
XML External Entity Reference in Apache Karaf
Arbitrary Code Execution in jackson-databind
XML External Entity Reference (XXE) in jackson-databind
Server-Side Request Forgery (SSRF) in jackson-databind
com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data
Deserialization of Untrusted Data in jackson-databind
Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
Arbitrary Code Execution in jackson-databind
Path Traversal in Hadoop
Arbitrary Command Execution in Hadoop
Exposure of Sensitive Information in Hadoop
Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main
Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.