Media
CVE-2023-50769
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.602
Restablecer filtros
Alta
CVE-2023-50766
Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability
Media
CVE-2023-50777
Tokens stored in plain text by PaaSLane Estimate Plugin
Media
CVE-2023-50773
Displayed in plain text by Dingding JSON Pusher Plugin
Media
CVE-2023-47327
Broken access control in Silverpeas
Crítica
CVE-2023-49093
HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
Crítica
CVE-2023-48910
Microcks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download
Baja
CVE-2022-2232
Keycloak vulnerable to LDAP Injection on UsernameForm Login
Alta
CVE-2023-49656
Jenkins MATLAB Plugin XML External Entity vulnerability
Media
CVE-2023-49653
Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials
Alta
CVE-2023-49654
Jenkins MATLAB Plugin missing permission checks
Alta
CVE-2023-49655
Jenkins MATLAB Plugin cross-site request forgery vulnerability
Alta
CVE-2023-48848
ureport arbitrary file read vulnerability
Alta
CVE-2023-34054
Reactor Netty HTTP Server denial of service vulnerability
Crítica
CVE-2023-48292
Run Shell Command allows Cross-Site Request Forgery
Alta
CVE-2023-48241
Whole content of all documents of all wikis exposed to anybody with view right on Solr suggest service
Crítica
CVE-2023-48240
Cookies are sent to external images in rendered diff (and server side request forgery)
Crítica
CVE-2022-46337
Apache Derby: LDAP injection vulnerability in authenticator
Crítica
CVE-2023-6038
H2O local file inclusion vulnerability
Alta
CVE-2023-34062
In Reactor Netty HTTP Server a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack
Crítica
CVE-2023-46731
XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest
Media
CVE-2023-5763
Eclipse Glassfish remote code execution issue
Crítica
CVE-2023-37913
org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter
Crítica
CVE-2023-37908
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.