Crítica
CVE-2019-14540
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Media
CVE-2019-16148
Cross-site scripting in Sakai
Alta
CVE-2019-10199
Improper Input Validation and Cross-Site Request Forgery in Keycloak
Media
CVE-2019-10201
Improper Verification of Cryptographic Signature in keycloak
Media
CVE-2019-11777
Improper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client library
Media
CVE-2019-10753
Incorrect Resource Transfer Between Spheres in eclipse-wtp
Alta
CVE-2019-5475
OS Command Injection in Nexus Yum Repository Plugin
Media
CVE-2019-12400
Improper input validation in Apache Santuario XML Security for Java
Media
CVE-2019-15477
Cross-site Scripting in Jooby
Media
CVE-2019-15488
Cross-site Scripting in Ignite Realtime Openfire
Media
CVE-2019-12397
Cross-site scripting in Apache Ranger
Alta
CVE-2019-10099
Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk (contr
Alta
CVE-2019-10088
Allocation of Resources Without Limits or Throttling in Apache Tika
Media
CVE-2019-10093
Allocation of Resources Without Limits or Throttling in Apache Tika
Alta
CVE-2019-10094
Allocation of Resources Without Limits or Throttling in Apache Tika
Alta
CVE-2019-10184
Undertow Missing Authorization when requesting a protected directory without trailing slash
Alta
CVE-2019-14439
Deserialization of untrusted data in FasterXML jackson-databind
Crítica
CVE-2019-14379
Deserialization of untrusted data in FasterXML jackson-databind
Crítica
CVE-2018-11779
Deserialization of Untrusted Data in Apache Storm
Media
CVE-2015-7559
Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ
Alta
Explotada en ataques
CVE-2019-0193
XML External Entity (XXE) Injection in Apache Solr
Crítica
CVE-2018-15890
Deserialization of Untrusted Data in EthereumJ
Crítica
CVE-2019-10173
Deserialization of Untrusted Data and Code Injection in xstream
Media
CVE-2019-12814
Deserialization of untrusted data in FasterXML jackson-databind
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.