Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 278
Restablecer filtrosThe redirect_uri validation logic allows for bypassing explicitly allowed hosts that would otherwise be restricted
Grackle has StackOverflowError in GraphQL query processing
Cross Site Request Forgery in Silverpeas
Cross-site Scripting in silverpeas
Broken access control in Silverpeas
Broken access control in Silverpeas
Cross Site Request Forgery in Silverpeas
Missing access control in Silverpeas
Broken access control in Silverpeas
Broken access control in Silverpeas
Authenticated Rundeck users can view or delete jobs they do not have authorization for.
Authenticated users can view job names and groups they do not have authorization to view
mXSS in AntiSamy
codehaus-plexus vulnerable to XML injection
OpenNMS vulnerable to remote code execution
Hazelcast Executor Services don't check client permissions properly
Graylog server has partial path traversal vulnerability in Support Bundle feature
XWiki Platform vulnerable to Code Injection in icon themes
snappy-java's Integer Overflow vulnerability in compress leads to DoS
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057
XWiki Platform may allow privilege escalation to programming rights via user's first name
Arbitrary code execution in de.tum.in.ase:artemis-java-test-sandbox
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.