Alta
CVE-2024-46978
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Media
CVE-2024-4629
Keycloak Services has a potential bypass of brute force protection
Baja
CVE-2024-45384
druid-pac4j, Apache Druid extension, has Padding Oracle vulnerability
Baja
CVE-2024-45537
Apache Druid: Users can provide MySQL JDBC properties not on allow list
Crítica
ghsa-2gh6-wc3m-g37f
hermes-management is vulnerable to RCE due to Apache commons-jxpath
Media
CVE-2024-46943
OpenDaylight Authentication, Authorization and Accounting (AAA) peer impersonation vulnerability
Alta
CVE-2024-46942
OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries
Crítica
CVE-2024-22399
Apache Seata Deserialization of Untrusted Data vulnerability
Alta
CVE-2024-38816
Path traversal vulnerability in functional web frameworks
Media
CVE-2024-8642
Eclipse Dataspace Components's ConsumerPullTransferTokenValidationApiController doesn't check for token validit
Media
CVE-2024-8646
Eclipse Glassfish URL redirection vulnerability
Alta
CVE-2023-6841
Keycloak Denial of Service vulnerability
Media
CVE-2024-45591
XWiki Platform document history including authors of any page exposed to unauthorized actors
Media
CVE-2024-7260
Keycloak Open Redirect vulnerability
Alta
CVE-2024-7341
Keycloak has session fixation in Elytron SAML adapters
Alta
CVE-2024-45294
XXE vulnerability in XSLT transforms in `org.hl7.fhir.core`
Crítica
CVE-2024-45758
H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
Media
CVE-2024-8391
Vertx gRPC server does not limit the maximum message size
Media
CVE-2024-8285
Missing hostname validation in Kroxylicious
Alta
CVE-2024-38807
Signature forgery in Spring Boot's Loader
Alta
CVE-2024-7885
Undertow vulnerable to Race Condition
Alta
CVE-2023-49198
Apache SeaTunnel SQL Injection vulnerability
Alta
CVE-2024-22281
Apache Helix Front (UI) component contained a hard-coded secret
Media
CVE-2024-43397
apollo-portal has potential unauthorized access issue
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.