Baja
CVE-2025-9092
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Alta
CVE-2025-55163
Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
Media
CVE-2025-55668
Apache Tomcat Session Fixation vulnerability
Alta
CVE-2025-48989
Apache Tomcat Improper Resource Shutdown or Release vulnerability
Media
CVE-2025-8916
Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive Allocation
Media
CVE-2025-43734
Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability
Media
CVE-2025-43735
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability
Media
CVE-2025-8885
Bouncy Castle for Java on All (API modules) allows Excessive Allocation
Media
CVE-2025-43736
Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability
Media
CVE-2025-4581
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
Media
CVE-2025-4655
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
Media
CVE-2025-4576
Liferay Portal Reflected XSS in blogs-web
Media
CVE-2025-48913
Apache CXF: Untrusted JMS configuration can lead to RCE
Alta
CVE-2025-53606
Apache Seata: Deserialization of untrusted Data in Apache Seata Server
Crítica
CVE-2025-30405
ExecuTorch integer overflow vulnerability
Crítica
CVE-2025-54950
ExecuTorch out-of-bounds access vulnerability
Crítica
CVE-2025-30404
ExecuTorch integer overflow vulnerability
Crítica
CVE-2025-54949
ExecuTorch heap buffer overflow vulnerability
Crítica
CVE-2025-54951
ExecuTorch vulnerable to Heap-based Buffer Overflow
Alta
CVE-2025-54125
XWiki exposes passwords and emails stored in fields not named password/email in xml.vm
Alta
CVE-2025-54124
XWiki leaks password hashes and other accessible password properties
Media
CVE-2025-32430
XWiki allows Reflected XSS in two templates
Media
CVE-2025-4604
Liferay Portal CAPTCHA Bypass for Gogo Shell
Media
CVE-2024-52279
Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.