Alta
CVE-2022-23596
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Alta
CVE-2022-23181
Race condition in Apache Tomcat
Alta
CVE-2021-23460
Prototype pollution in min-dash
Media
CVE-2022-22932
Path traversal in Apache Karaf
Alta
CVE-2021-41766
Insecure Java Deserialization in Apache Karaf
Alta
CVE-2022-23945
Missing authentication in ShenYu
Alta
CVE-2022-23223
Password exposure in ShenYu
Crítica
CVE-2022-23944
Missing authentication in ShenYu
Crítica
CVE-2021-45029
Code injection in ShenYu
Media
CVE-2022-23437
Infinite Loop in Apache Xerces Java
Alta
CVE-2021-22570
Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error me
Alta
CVE-2021-46383
Mingsoft MCMS SQL injection vulnerability
Crítica
CVE-2021-46386
Mingsoft MCMS vulnerable to Remote Code Execution via file upload.
Alta
CVE-2021-46385
Mingsoft MCMS SQL injection vulnerability
Crítica
CVE-2021-46089
SQL Injection in JeecgBoot
Crítica
CVE-2022-22929
Arbitrary File Upload in Mingsoft MCMS
Crítica
CVE-2022-22930
RCE in Mingsoft MCMS
Crítica
CVE-2022-23315
Arbitrary file upload in Mingsoft MCMS
Media
CVE-2021-42357
Cross-site Scripting in Apache Knox SSO
Crítica
CVE-2022-0239
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
Alta
CVE-2024-23683
Trust Boundary Violation due to Incomplete Blacklist in Test Failure Processing in Ares
Baja
CVE-2022-23106
Observable Discrepancy and Observable Timing Discrepancy in Jenkins Configuration as Code Plugin
Alta
CVE-2022-23107
Path Traversal in Jenkins Warnings Next Generation Plugin
Media
CVE-2022-20612
Cross-Site Request Forgery in Jenkins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.