Crítica
CVE-2025-59390
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Alta
CVE-2025-66021
OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization
Alta
CVE-2025-9624
OpenSearch is vulnerable to DoS via complex query_string inputs
Alta
Explotada en ataques
CVE-2025-58360
GeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature
Media
CVE-2025-21621
GeoServer has a Reflected Cross-Site Scripting (XSS) vulnerability in its WMS GetFeatureInfo HTML format
Alta
CVE-2025-65998
Apache Syncope's AES encryption stores hard-coded passwords in internal database
Baja
CVE-2025-13435
Resty has a Path Traversal vulnerability
Crítica
CVE-2025-64408
Apache Causeway vulnerable to deserialization in Java
Media
CVE-2025-65089
XWiki view file macro: User can view content of office file without view rights on the attachment
Crítica
CVE-2025-12383
Eclipse Jersey has a Race Condition
Media
CVE-2025-54990
XWiki AdminTools application doesn't set permissions on the AdminTools space
Media
CVE-2025-13265
lsFusion Server is vulnerable to Path Traversal through its unpackFile function
Media
CVE-2025-13262
lsFusion Platform has a Path Traversal vulnerability
Media
CVE-2025-13266
vlife-base has Path Traversal vulnerability
Media
CVE-2025-13261
lsFusion Platform has a Path Traversal vulnerability
Alta
ghsa-7xw4-g7mm-r4hh
Amazon Web Services Advanced JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
Alta
CVE-2025-64099
OpenAM: Using arbitrary OIDC requested claims values in id_token and user_info is allowed
Alta
CVE-2025-64518
CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection
Media
CVE-2025-10713
WSO2 Carbon Mediation vulnerable to XML External Entity (XXE) attacks
Baja
ghsa-j2pc-v64r-mv4f
Protobuf Maven Plugin protocDigest is ignored when using protoc from PATH
Media
CVE-2025-62275
Liferay Portal and DXP do not check permissions of images in a blog entry
Media
CVE-2025-62276
Liferay Portal and DXP use an incorrect cache-control header
Media
CVE-2025-62267
Liferay Portal and DXP affected by multiple cross-site scripting (XSS) vulnerabilities in web content template’s select structure page
Media
CVE-2025-62264
Liferay Portal Vulnerable to Reflected XSS via the selectedLanguageId Parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.