Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.601
Restablecer filtrosServer Side Request Forgery in svgSalamander
High severity vulnerability that affects org.scala-lang:scala-compiler
Improper Certificate Validation in Apache activemq-client
Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)
Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling)
Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request
Eclipse Jetty Server generates error message containing sensitive information
Jetty vulnerable to exposure of sensitive information due to observable discrepancy
Critical severity vulnerability that affects org.eclipse.jetty:jetty-server
Moderate severity vulnerability that affects org.springframework.boot:spring-boot
Race condition in org.apache.hbase:hbase-thrift
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
jackson-dataformat-xml vulnerable to server side request forgery (SSRF)
OrientDB Studio web management interface is vulnerable to clickjacking attacks
OrientDB Server Community Edition uses insufficiently random values to generate session IDs
OrientDB-Server vulnerable to Cross-Site Request Forgery
Moderate severity vulnerability that affects org.keycloak:keycloak-core
Moderate severity vulnerability that affects org.keycloak:keycloak-core
Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core
Possible privilege escalation in org.springframework:spring-core
Path Traversal in org.springframework:spring-core
Remote code execution occurs in Apache Solr
There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.