Alta
CVE-2025-27820
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Crítica
CVE-2025-32969
org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API
Alta
CVE-2025-32968
org.xwiki.platform:xwiki-platform-oldcore allows SQL injection in short form select requests through the script query API
Media
CVE-2025-32950
io.jmix.localfs:jmix-localfs has a Path Traversal in Local File Storage
Media
CVE-2025-32783
Unregistered users can see "public" messages from a closed wiki via notifications from a different wiki
Media
CVE-2025-30677
Apache Pulsar Kafka Connector Logs Sensitive Information in Application Logs
Alta
CVE-2025-31487
The XWiki JIRA extension allows data leak through an XXE attack by using a fake JIRA server
Media
CVE-2025-31721
Jenkins Missing Permission Check
Media
CVE-2025-31720
Jenkins Missing Permission Check
Media
CVE-2025-31724
Jenkins Cadence vManager Plugin Stores Verisium Manager vAPI keys Unencrypted
Alta
CVE-2025-31722
Jenkins Templating Engine Plugin Vulnerable to Arbitrary Code Execution
Alta
CVE-2025-31129
jooby-pac4j: deserialization of untrusted data
Crítica
CVE-2024-56325
Apache Pinot Vulnerable to Authentication Bypass
Baja
CVE-2025-27427
Apache ActiveMQ Artemis User Without Create Address Permissions can Modify Address Routing-Type
Media
CVE-2024-12369
WildFly Elytron OpenID Connect Client ExtensionOIDC authorization code injection attack
Crítica
CVE-2025-29315
OpenDaylight SFC Allows Unauthorized Privileged Execution via Crafted Request
Alta
CVE-2025-29314
OpenDaylight SFC Insecure Shiro Cookie Configuration
Alta
CVE-2025-29313
OpenDaylight SFC Denial of Service (DoS)
Alta
CVE-2025-27553
Apache Commons VFS Has Relative Path Traversal Vulnerability
Media
CVE-2025-2622
aizuda snail-job Vulnerable to Deserialization via `nodeExpression` Argument
Media
CVE-2025-26796
Apache Oozie Cross-Site Scripting (XSS)
Media
CVE-2025-2565
Liferay Portal and Liferay DXP Reveals Data via Forms
Alta
CVE-2024-8616
H2O Vulnerable to Arbitrary File Overwrite
Alta
CVE-2024-8062
H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.