Alta
CVE-2023-48222
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Media
CVE-2023-47112
Authenticated users can view job names and groups they do not have authorization to view
Crítica
CVE-2023-6038
H2O local file inclusion vulnerability
Alta
CVE-2023-26031
Apache Hadoop allows local user to gain root privileges
Alta
CVE-2023-5720
Quarkus does not properly sanitize artifacts created from its use of the Gradle plugin, allowing certain build system information to remain
Alta
CVE-2023-5245
Zip slip in mleap
Alta
CVE-2023-48089
xxl-job-admin vulnerable to Remote Code Execution
Media
CVE-2023-48088
xxl-job-admin vulnerable to Cross Site Scripting
Media
CVE-2023-48087
xxl-job-admin vulnerable to Insecure Permissions
Alta
CVE-2023-34062
In Reactor Netty HTTP Server a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack
Alta
CVE-2023-5072
Java: DoS Vulnerability in JSON-JAVA
Baja
ghsa-72fp-w44g-625q
Signing DynamoDB Sets when using the AWS Database Encryption SDK.
Crítica
CVE-2023-46732
XWiki Platform vulnerable to reflected cross-site scripting through revision parameter in content menu
Crítica
CVE-2023-46731
XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest
Alta
CVE-2023-39913
Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability
Media
CVE-2023-4061
wildfly-core Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Crítica
CVE-2023-46244
XWiki Platform privilege escalation from script right to programming right through title displayer
Alta
CVE-2023-46243
XWiki Platform vulnerable to privilege escalation and remote code execution via the edit action
Crítica
CVE-2023-46242
XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token
Media
CVE-2023-4043
Eclipse Parsson Denial of Service vulnerability
Media
CVE-2023-5763
Eclipse Glassfish remote code execution issue
Alta
CVE-2023-31579
Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key
Crítica
CVE-2023-46502
OpenCRX allows a remote attacker to execute arbitrary code via a crafted request
Alta
ghsa-7c2q-5qmr-v76q
DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.