Media
CVE-2025-62259
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Media
CVE-2025-62261
Liferay Portal Stores Password Reset Tokens in Plain Text
Media
CVE-2025-62262
Liferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature
Alta
CVE-2025-11419
Keycloak TLS Client-Initiated Renegotiation Denial of Service
Alta
CVE-2025-55752
Apache Tomcat Vulnerable to Relative Path Traversal
Media
CVE-2025-12194
Bouncy Castle Vulnerable to Uncontrolled Resource Consumption
Media
CVE-2025-11429
Keycloak does not invalidate sessions when "Remember Me" is disabled
Media
CVE-2025-12110
Keycloak does not invalidate offline sessions when the offline_access scope is removed
Media
CVE-2025-62256
Liferay Portal and DXP do not properly restrict access to OpenAPI
Media
CVE-2025-62710
Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl
Baja
CVE-2025-11966
Vert.x-Web vulnerable to Stored Cross-site Scripting in directory listings via file names
Media
CVE-2025-11965
Vert.x-Web Access Control Flaw in StaticHandler’s Hidden File Protection for Files Under Hidden Directories
Media
CVE-2025-62250
Liferay Portal fails to verify messages from the cluster network is trusted
Alta
CVE-2025-57738
Apache Syncope allows malicious administrators to inject Groovy code
Media
CVE-2025-34281
ThingsBoard vulnerable to stored cross-site scripting (XSS) vulnerability in the dashboard's Image Upload Gallery feature
Crítica
CVE-2025-11849
Mammoth is vulnerable to Directory Traversal
Media
CVE-2025-41254
Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messages
Alta
CVE-2025-41253
Spring Cloud Gateway Server Webflux is vulnerable to Expression Language Injection
Media
ghsa-3xgr-h5hq-7299
GeoIP processor disables SSL certificate validation when downloading databases
Media
ghsa-28gg-8qqj-fhh5
OpenSearch Data Prepper uses deprecated SSL protocol identifier
Alta
CVE-2025-59419
Netty has SMTP Command Injection Vulnerability that Allows Email Forgery
Media
CVE-2025-11580
PowerJob has Missing Authorization in its /user/list file
Alta
CVE-2025-30001
Apache StreamPark contains an Incorrect Execution-Assigned Permissions vulnerability
Media
CVE-2025-61788
Opencast's Paella Player 7 is vulnerable to Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.