Media
CVE-2025-64143
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 191
Restablecer filtros
Media
CVE-2025-62228
Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers
Media
CVE-2025-58057
Netty's decoders vulnerable to DoS via zip bomb style attack
Media
CVE-2024-52980
Elasticsearch-grok Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function
Alta
CVE-2025-31722
Jenkins Templating Engine Plugin Vulnerable to Arbitrary Code Execution
Alta
CVE-2025-27497
OpenDJ Denial of Service (DoS) using alias loop
Media
CVE-2024-24778
Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know.
Alta
CVE-2024-52550
Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin
Alta
CVE-2024-52551
Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin
Alta
CVE-2024-31411
Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes.
Media
CVE-2024-31979
Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements.
Baja
CVE-2024-30471
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.
Baja
CVE-2024-39458
Exposure of secrets through system log in Jenkins Structs Plugin
Crítica
CVE-2024-29868
Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation
Alta
CVE-2024-34144
Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies
Alta
CVE-2024-34145
Jenkins Script Security Plugin sandbox bypass vulnerability
Media
CVE-2024-23450
Elasticsearch Uncontrolled Resource Consumption vulnerability
Media
CVE-2024-24683
Improper Input Validation vulnerability in Apache Hop Engine
Media
CVE-2024-23901
Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin
Media
CVE-2023-46673
Elasticsearch Improper Handling of Exceptional Conditions
Media
CVE-2023-41934
Improper masking of credentials in Jenkins Pipeline Maven Integration Plugin
Media
CVE-2023-38905
Jeecg-boot SQL Injection vulnerability
Media
CVE-2023-40340
Jenkins NodeJS Plugin improper credential masking vulnerability
Crítica
CVE-2023-39020
Code injection in stanford-parser
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.