Alta
CVE-2022-1471
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 310
Restablecer filtros
Crítica
CVE-2022-41928
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml
Alta
CVE-2022-42124
Inefficient Regular Expression Complexity in Liferay Portal
Crítica
CVE-2022-42122
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module
Alta
CVE-2022-42121
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout Module
Media
CVE-2022-42111
Liferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module
Media
CVE-2022-31777
A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a mal
Media
CVE-2022-42115
Liferay Portal Vulnerable to XSS in the Object Module
Media
CVE-2022-42112
Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module
Media
CVE-2022-28979
Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module
Media
CVE-2022-28982
Liferay Portal and Liferay DXP Vulnerable to XSS via Tag Name
Alta
CVE-2022-1278
WildFly vulnerable to Insecure Default Initialization of Resource
Media
CVE-2022-36527
Jfinal Cross-site Scripting vulnerability
Alta
CVE-2022-25867
Socket.IO-client Java before 2.0.1 vulnerable to NULL Pointer Dereference
Alta
CVE-2022-31159
Partial Path Traversal in com.amazonaws:aws-java-sdk-s3
Alta
CVE-2022-2256
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Media
CVE-2022-33113
Cross-site Scripting in Jfinal CMS
Alta
CVE-2022-29631
Server-Side Request Forgery in Jodd HTTP
Media
CVE-2021-20328
Improper Certificate Validation in MongoDB
Media
CVE-2020-25476
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter
Alta
CVE-2020-15842
Liferay Portal and Liferay DXP have Insecure Deserialization Vulnerability
Alta
CVE-2020-12760
OpenNMS Horizon RCE via Unsafe Deserialization
Crítica
CVE-2020-8441
Deserialization of Untrusted Data in JYaml
Media
CVE-2020-7934
Liferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortlet
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.