Baja
CVE-2025-14082
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Crítica
CVE-2025-14307
Robocode has an insecure temporary file creation vulnerability in the AutoExtract component
Crítica
CVE-2025-14306
Robocode vulnerable to Directory Traversal in recursivelyDelete Method
Media
ghsa-93fv-4pm9-xp28
JDA (Java Discord API) downloads external URLs when updating message components
Alta
CVE-2025-66623
Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands
Alta
CVE-2025-66566
yawkat LZ4 Java has a possible information leak in Java safe decompressor
Crítica
CVE-2025-66516
Apache Tika has XXE vulnerability
Media
CVE-2025-11222
Central Dogma's Login Function Has an Open Redirect Vulnerability
Alta
CVE-2024-3884
Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded
Baja
CVE-2025-66453
Rhino has high CPU usage and potential DoS when passing specific numbers to `toFixed()` function
Media
CVE-2025-13472
BlazeMeter Jenkins Plugin is Missing Authorization for Available Resources
Baja
CVE-2025-10939
Keycloak unable to restrict access to the admin console
Media
CVE-2025-11538
Keycloak has debug default bind address
Alta
CVE-2025-14874
Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls
Alta
CVE-2025-55749
XWiki Jetty Package (XJetty) allows accessing any application file through URL
Alta
CVE-2025-64775
Apache Struts is Vulnerable to DoS via File Leak
Media
CVE-2025-13806
NutzBoot Incorrect Privilege Assignment vulnerability
Baja
CVE-2025-13804
NutzBoot vulnerable to information disclosure
Baja
CVE-2025-13805
NutzBoot vulnerable to deserialization
Alta
CVE-2025-12183
LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS
Baja
CVE-2025-66372
Mustangproject allows exfiltrating files via XXE attacks
Media
CVE-2025-3261
ThingsBoard allows an authenticated user to upload malicious SVG images
Media
CVE-2025-54057
Apache SkyWalking has a stored XSS vulnerability
Alta
CVE-2025-62728
Hive Metastore Server is vulnerable to SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.