Alta
CVE-2023-22602
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 278
Restablecer filtros
Crítica
CVE-2018-25068
globalpom-utils has Insecure Temporary File
Crítica
CVE-2022-36437
Hazelcast connection caching
Alta
CVE-2022-41932
Creation of new database tables through login form on PostgreSQL
Crítica
CVE-2022-41930
Missing Authorization to enable or disable users in org.xwiki.platform:xwiki-platform-user-profile-ui
Alta
CVE-2022-45381
Arbitrary file read vulnerability in Jenkins Pipeline Utility Steps Plugin
Alta
CVE-2022-45129
Payara, when deployed to the root context, allows attackers to visit META-INF and WEB-INF
Alta
CVE-2022-37866
Apache Ivy vulnerable to path traversal
Media
CVE-2022-39259
Jadx-gui vulnerable to swing HTML Denial of Service (DoS) attack
Crítica
CVE-2022-42889
Arbitrary code execution in Apache Commons Text
Media
CVE-2022-28731
Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp
Alta
CVE-2021-34538
Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.
Alta
CVE-2022-31159
Partial Path Traversal in com.amazonaws:aws-java-sdk-s3
Alta
CVE-2022-2191
Jetty SslConnection does not release pooled ByteBuffers in case of errors
Baja
CVE-2022-2047
Jetty invalid URI parsing may produce invalid HttpURI.authority
Crítica
CVE-2022-33980
Code injection in Apache Commons Configuration
Alta
CVE-2022-26477
SystemDS CPU exhaustion vulnerability
Alta
CVE-2022-31044
Rundeck's Key Storage converter plugin mechanism's encryption layer not working in 4.2.0, 4.2.1, 4.3.0
Media
CVE-2019-10402
Improper Neutralization of Input During Web Page Generation in Jenkins
Media
CVE-2019-10401
Improper Neutralization of Input During Web Page Generation in Jenkins
Media
CVE-2021-21683
Path traversal vulnerability on Windows in Jenkins
Media
CVE-2021-29051
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App
Media
CVE-2021-21634
Passwords stored in plain text by Jenkins Jabber (XMPP) notifier and control Plugin
Media
CVE-2021-21606
Arbitrary file existence check in file fingerprints in Jenkins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.