Baja
CVE-2025-11966
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Media
CVE-2025-11965
Vert.x-Web Access Control Flaw in StaticHandler’s Hidden File Protection for Files Under Hidden Directories
Media
CVE-2025-62249
Liferay Portal reflected cross-site scripting (XSS) vulnerability in the google_gaget
Media
CVE-2025-62250
Liferay Portal fails to verify messages from the cluster network is trusted
Alta
CVE-2025-57738
Apache Syncope allows malicious administrators to inject Groovy code
Alta
CVE-2025-47410
Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system
Crítica
CVE-2025-56316
MCMS vulnerable SQL injection via the content_title parameter
Media
CVE-2025-34281
ThingsBoard vulnerable to stored cross-site scripting (XSS) vulnerability in the dashboard's Image Upload Gallery feature
Media
CVE-2025-10044
Keycloak error_description injection on error pages that can trigger phishing attacks
Crítica
CVE-2025-11849
Mammoth is vulnerable to Directory Traversal
Media
CVE-2025-41254
Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messages
Alta
CVE-2025-41253
Spring Cloud Gateway Server Webflux is vulnerable to Expression Language Injection
Media
ghsa-3xgr-h5hq-7299
GeoIP processor disables SSL certificate validation when downloading databases
Media
ghsa-28gg-8qqj-fhh5
OpenSearch Data Prepper uses deprecated SSL protocol identifier
Alta
CVE-2025-62371
OpenSearch Data Prepper plugins trust all SSL certificates by default
Alta
CVE-2025-59419
Netty has SMTP Command Injection Vulnerability that Allows Email Forgery
Media
CVE-2025-55039
This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0.
Alta
CVE-2025-59250
JDBC Driver for SQL Server has improper input validation issue
Media
CVE-2024-44088
Apache Geode web-api is vulnerable to Cross-site Scripting
Media
CVE-2025-62251
Liferay has Incorrect Permission Assignment for Critical Resource
Media
CVE-2025-62241
Liferay Commerce Order Content Web is Vulnerable to Authorization Bypass Through User-Controlled Key
Media
CVE-2025-62252
Liferay is Vulnerable to Authorization Bypass Through User-Controlled Key
Media
CVE-2025-62246
Liferay Mentions Web is Vulnerable to Cross-site Scripting
Media
CVE-2025-62242
Liferay Account Admin Web vulnerable to Authorization Bypass Through User-Controlled Key
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.