Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtrosGeneral OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches
Deep Java Library path traversal issue
Snowflake JDBC uses insecure temporary credential cache file permissions
Snowflake JDBC allows an untrusted search path on Windows
RuoYi has insecure permissions
RuoYi vulnerable to Denial of Service by attackers with admin privileges
RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring
Apache Hive Incorrectly Assigns Permissions for a Critical Resource
Infinispan vulnerable to Insertion of Sensitive Information into Log File
Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing
Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator
Apache Solr Relative Path Traversal vulnerability
Apache Solr vulnerable to Execution with Unnecessary Privileges
HL7 FHIR IG Publisher potentially exposes GitHub repo user and credential information
XXE vulnerability in XSLT parsing in `org.hl7.fhir.publisher`
Apache Wicket: An attacker can intentionally trigger a memory leak
Cross site scripting in Silverpeas Core
Missing permission checks in Jenkins Azure Service Fabric Plugin
Disabled permissions can be granted by Folder-based in Jenkins Authorization Strategy Plugin
CSRF vulnerability in Jenkins Azure Service Fabric Plugin
Cache confusion in Jenkins Eiffel Broadcaster Plugin
Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.