Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtrosorg.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins
org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro
org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability
org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability
org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability
xwiki-platform-administration-ui vulnerable to privilege escalation
org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Basic Cross-site Scripting
org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors
org.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticate endpoints
org.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-logging-ui Eval Injection vulnerability
xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-legacy-notification-activitymacro Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-oldcore vulnerable to data leak through deleted documents
Jenkins Thycotic DevOps Secrets Vault Plugin does not properly mask credentials
Jenkins Azure Key Vault Plugin does not properly mask credentials
Jenkins Kubernetes Plugin does not properly mask credentials
Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter
Goobi viewer Core has Cross-Site Scripting Vulnerability in User Comments
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.