Alta
CVE-2025-26866
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Media
CVE-2025-14518
PowerJob has a server-side request forgery vulnerability in PingPongUtils.java
Media
CVE-2025-66033
Improper Memory Cleanup in the Okta Java SDK
Media
CVE-2025-67636
Jenkins is missing a permission check on password fields
Media
CVE-2025-67637
Jenkins's build authorization token is stored and displayed in plain text
Media
CVE-2025-67638
Jenkins's build authorization token is stored and displayed in plain text
Alta
CVE-2025-67635
Jenkins has a Denial of service vulnerability in HTTP-based CLI
Baja
CVE-2025-67639
Jenkins has a CSRF vulnerability on the login form
Alta
CVE-2025-66474
XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection
Alta
CVE-2025-66473
XWiki's REST APIs don't enforce any limits, leading to unavailability and OOM in large wikis
Crítica
CVE-2025-14307
Robocode has an insecure temporary file creation vulnerability in the AutoExtract component
Crítica
CVE-2025-14306
Robocode vulnerable to Directory Traversal in recursivelyDelete Method
Media
ghsa-93fv-4pm9-xp28
JDA (Java Discord API) downloads external URLs when updating message components
Alta
CVE-2025-66566
yawkat LZ4 Java has a possible information leak in Java safe decompressor
Crítica
CVE-2025-66516
Apache Tika has XXE vulnerability
Baja
CVE-2025-66453
Rhino has high CPU usage and potential DoS when passing specific numbers to `toFixed()` function
Media
CVE-2025-13472
BlazeMeter Jenkins Plugin is Missing Authorization for Available Resources
Alta
CVE-2025-14874
Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls
Alta
CVE-2025-55749
XWiki Jetty Package (XJetty) allows accessing any application file through URL
Media
CVE-2025-13806
NutzBoot Incorrect Privilege Assignment vulnerability
Baja
CVE-2025-13804
NutzBoot vulnerable to information disclosure
Baja
CVE-2025-13805
NutzBoot vulnerable to deserialization
Media
CVE-2025-3261
ThingsBoard allows an authenticated user to upload malicious SVG images
Crítica
CVE-2025-59390
Apache Druid’s Kerberos authenticator uses a weak fallback secret
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.