Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.072
Restablecer filtrosApache Tomcat Open Redirect vulnerability
When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode
In Bouncy Castle JCE Provider the other party DH public key is not fully validated
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values
In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
The Bouncy Castle JCE Provider carry a propagation bug
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate
Deserialization of Untrusted Data in Bouncy castle
Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location
Moderate severity vulnerability that affects io.vertx:vertx-core
Excessive memory allocation
High severity vulnerability that affects io.vertx:vertx-web
Moderate severity vulnerability that affects org.apache.tika:tika-core
Comparison errorr in org.apache.tika:tika-core
Moderate severity vulnerability that affects org.apache.tika:tika-core
High severity vulnerability that affects org.apache.tika:tika-core
Apache Tika allows Java code execution for serialized objects embedded in MATLAB files
Apache Tika does not properly initialize the XML parser or choose handlers
Apache Tika Server exposes sensitive information
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.