Media
CVE-2024-56923
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 278
Restablecer filtros
Media
CVE-2025-23026
jte's HTML templates containing Javascript template strings are subject to XSS
Crítica
CVE-2024-55875
http4k has a potential XXE (XML External Entity Injection) vulnerability
Media
ghsa-mpcw-3j5p-p99x
Butterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE)
Media
CVE-2024-47882
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
Media
CVE-2024-6763
Eclipse Jetty URI parsing of invalid authority
Crítica
CVE-2023-25581
pac4j-core affected by a Java deserialization vulnerability
Media
CVE-2024-46979
org.xwiki.platform:xwiki-platform-notifications-ui leaks data of notification filters of users
Media
CVE-2024-8642
Eclipse Dataspace Components's ConsumerPullTransferTokenValidationApiController doesn't check for token validit
Baja
CVE-2024-42850
Silverpeas vulnerable to password complexity rule bypass
Alta
CVE-2024-43044
Jenkins Remoting library arbitrary file read vulnerability
Media
CVE-2024-39031
Silverpeas Core Cross-site Scripting vulnerability
Crítica
CVE-2024-36042
Silverpeas authentication bypass
Media
CVE-2024-29392
Silverpeas Core vulnerable to Cross Site Scripting
Alta
CVE-2024-28847
OpenMetadata vulnerable to a SpEL Injection in `PUT /api/v1/events/subscriptions` (`GHSL-2023-251`)
Crítica
CVE-2024-28253
OpenMetadata vulnerable to SpEL Injection in `PUT /api/v1/policies` (`GHSL-2023-252`)
Media
CVE-2024-31861
Code injection in Apache Zeppelin Shell
Crítica
CVE-2024-31997
XWiki Platform remote code execution from account through UIExtension parameters
Media
CVE-2024-31868
Apache Zeppelin vulnerable to cross-site scripting in the helium module
Crítica
CVE-2024-31866
Improper escaping in Apache Zeppelin
Media
CVE-2023-51445
Stored Cross-Site Scripting (XSS) vulnerability in GeoServer's REST Resources API
Alta
CVE-2023-51747
SMTP smuggling in Apache James
Baja
CVE-2024-20925
Vulnerability affecting the org.openjfx:javafx-media maven component of the OpenJFX project
Alta
CVE-2023-45860
Hazelcast Platform permission checking in CSV File Source connector
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.