Alta
CVE-2023-37957
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2023-37943
Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
Media
CVE-2023-37950
Jenkins mabl Plugin missing permission check
Media
CVE-2023-37952
Jenkins mabl Plugin vulnerable to cross-site request forgery
Media
CVE-2023-37956
Jenkins Test Results Aggregator Plugin missing permission check
Media
CVE-2023-37948
Jenkins Oracle Cloud Infrastructure Compute Plugin missing SSH host key validation
Sin evaluar
drupal-contrib-2023-030
drupal/tfa - SA-CONTRIB-2023-030
Media
CVE-2023-37280
Pimcore admin UI vulnerable to Cross-site Scripting in 2 factor authentication setup page
Crítica
CVE-2023-37582
RocketMQ NameServer component Code Injection vulnerability
Alta
CVE-2023-35908
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that is not affected
Media
CVE-2023-37579
Apache Pulsar Function Worker Incorrect Authorization vulnerability
Media
CVE-2023-31007
Apache Pulsar Broker Improper Authentication vulnerability
Crítica
CVE-2023-30429
Apache Pulsar Incorrect Authorization vulnerability
Alta
CVE-2023-30428
Apache Pulsar Broker's Rest Producer vulnerable to Incorrect Authorization
Alta
CVE-2023-22888
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter. This vulnerability is considered low s
Alta
CVE-2023-36543
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not aff
Alta
CVE-2023-22887
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id pa
Alta
CVE-2022-46651
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considere
Alta
CVE-2022-45855
Apache Ambari Expression Language Injection vulnerability
Alta
CVE-2022-42009
Apache Ambari Expression Language Injection vulnerability
Alta
CVE-2023-32200
Apache Jena Expression Language Injection vulnerability
Alta
CVE-2023-37967
DirectoryPress <= 3.6.2 - Missing Authorization
Media
CVE-2023-37974
WP-FB-AutoConnect <= 4.6.1 - Cross-Site Request Forgery via jfb_admin_page
Alta
CVE-2023-3136
MailArchiver <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.