Media
CVE-2020-5230
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Media
CVE-2020-5222
Hard-Coded Key Used For Remember-me Token in Opencast
Media
CVE-2020-5231
Users with ROLE_COURSE_ADMIN can create new users in Opencast
Crítica
CVE-2020-5206
Authentication Bypass For Endpoints With Anonymous Access in Opencast
Crítica
CVE-2019-12409
Unrestricted upload of file with dangerous type in Apache Solr
Baja
CVE-2020-5207
Request smuggling is possible when both chunked TE and content length specified
Media
CVE-2019-10770
Default development error handler in Ratpack is vulnerable to HTML content injection (XSS)
Crítica
CVE-2019-10158
Improper implementation of the session fixation protection in Infinispan
Media
CVE-2020-5397
CSRF attack via CORS preflight requests with Spring MVC or Spring WebFlux
Alta
CVE-2020-5398
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application
Media
CVE-2019-10070
Stored XSS in Apache Atlas
Media
CVE-2019-10219
The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks
Crítica
CVE-2019-17571
Deserialization of Untrusted Data in Log4j
Crítica
CVE-2017-5645
Deserialization of Untrusted Data in Log4j
Alta
CVE-2019-12418
Insufficiently Protected Credentials in Apache Tomcat
Alta
CVE-2019-17563
In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack
Media
CVE-2019-16771
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') in Armeria
Alta
CVE-2019-12421
Apache NiFi user log out issue
Media
CVE-2019-10083
Apache NiFi process group information disclosure
Media
CVE-2019-10080
Apache NiFi information disclosure by XXE
Media
CVE-2019-17632
Unescaped exception messages in error responses in Jetty
Alta
CVE-2018-11768
user/group information can be corrupted across storing in fsimage and reading back from fsimage
Crítica
CVE-2019-10212
Potential to access user credentials from the log files when debug logging enabled
Alta
CVE-2019-0207
Path traversal attack on Windows platforms
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.