Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
The Bouncy Castle JCE Provider carry a propagation bug
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate
Deserialization of Untrusted Data in Bouncy castle
Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location
Moderate severity vulnerability that affects io.vertx:vertx-core
Excessive memory allocation
High severity vulnerability that affects io.vertx:vertx-web
Moderate severity vulnerability that affects org.apache.tika:tika-core
Comparison errorr in org.apache.tika:tika-core
Moderate severity vulnerability that affects org.apache.tika:tika-core
High severity vulnerability that affects org.apache.tika:tika-core
Apache Tika allows Java code execution for serialized objects embedded in MATLAB files
Apache Tika does not properly initialize the XML parser or choose handlers
Apache Tika Server exposes sensitive information
org.apache.tika:tika-parsers has an Infinite Loop vulnerability
Command injection in org.apache.tika:tika-core
Apache Tika is vulnerable to entity expansions which can lead to a denial of service attack
Denial of service vulnerability in org.apache.httpcomponents:httpclient
Improper certificate validation in org.apache.httpcomponents:httpclient
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient
Moderate severity vulnerability that affects org.restlet.jse:org.restlet
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.