Alta
Explotada en ataques
CVE-2025-58360
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 53
Restablecer filtros
Alta
CVE-2025-64099
OpenAM: Using arbitrary OIDC requested claims values in id_token and user_info is allowed
Media
CVE-2025-53864
Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON
Alta
CVE-2025-30220
[XBOW-025-068] XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service
Alta
CVE-2025-47889
Jenkins WSO2 Oauth Plugin Fails to Properly Authenticate User Credentials
Media
CVE-2025-1391
Improper Authorization in Keycloak Organization Mapper Allows Unauthorized Organization Claims
Crítica
CVE-2024-47807
Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation
Crítica
CVE-2024-47806
Jenkins OpenId Connect Authentication Plugin lacks audience claim validation
Alta
CVE-2021-22573
google-oauth-java-client improperly verifies cryptographic signature
Crítica
CVE-2023-45138
XWiki Change Request Application UI XSS and remote code execution through change request title
Media
CVE-2023-36820
io.micronaut.security:micronaut-security-oauth2 has invalid IdTokenClaimsValidator logic on aud
Alta
CVE-2022-4244
plexus-codehaus vulnerable to directory traversal
Alta
CVE-2023-32007
** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has
Crítica
CVE-2023-1784
jeecg-boot vulnerable to improper authentication
Media
ghsa-9vx8-f5c4-862x
XML External Entity (XXE) vulnerability in apoc.import.graphml
Media
CVE-2023-23926
XML External Entity (XXE) vulnerability in apoc.import.graphml
Media
CVE-2023-23612
Issue with whitespace in JWT roles in OpenSearch
Alta
CVE-2022-23532
org.neo4j.procedure:apoc Path Traversal Vulnerability
Media
CVE-2022-36022
Use of unclaimed s3 bucket in tests and examples
Alta
CVE-2022-39248
matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion
Media
CVE-2022-37423
Neo4j Graph apoc plugins Partial Path Traversal Vulnerability
Media
CVE-2021-21619
XSS vulnerability in Jenkins Claim Plugin
Alta
CVE-2020-2166
RCE vulnerability in Jenkins Pipeline: AWS Steps Plugin
Alta
CVE-2012-1618
Unescaped parameters in the PostgreSQL JDBC driver
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.