Crítica
CVE-2024-21534
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Media
CVE-2024-28168
Apache XML Graphics FOP XML External Entity Reference ('XXE') vulnerability
Media
CVE-2024-9622
HTTP Request Smuggling Leading to Client Timeouts in resteasy-netty4
Media
CVE-2024-9621
Quarkus CXF logs passwords and other secrets
Media
CVE-2024-47855
JSON-lib mishandles an unbalanced comment string
Crítica
CVE-2024-47561
Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK)
Alta
CVE-2024-47554
Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader
Media
CVE-2024-47803
Jenkins exposes multi-line secrets through error messages
Media
CVE-2024-47804
Jenkins item creation restriction bypass vulnerability
Media
CVE-2024-47805
Jenkins Credentials plugin reveals encrypted values of credentials to users with Extended Read permission
Crítica
CVE-2024-47807
Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation
Crítica
CVE-2024-47806
Jenkins OpenId Connect Authentication Plugin lacks audience claim validation
Media
CVE-2024-45772
Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator.
Media
CVE-2024-9329
Eclipse Glassfish improperly handles http parameters
Baja
CVE-2024-47197
Maven Archetype Plugin: Maven Archetype integration-test may package local settings into the published artifact, possibly containing credentials
Baja
CVE-2024-23454
Apache Hadoop: Temporary File Local Information Disclosure
Alta
CVE-2024-39928
Apache Linkis Spark EngineConn: Commons Lang's RandomStringUtils Random string security vulnerability
Media
CVE-2024-38809
Spring Framework DoS via conditional HTTP request
Alta
CVE-2024-46985
DataEase has an XML External Entity Reference vulnerability
Crítica
CVE-2024-46997
DataEase's H2 datasource has a remote command execution risk
Alta
CVE-2024-7254
protobuf-java has potential Denial of Service issue
Alta
CVE-2024-46984
Gematik Referenzvalidator has an XXE vulnerability that can lead to a Server Side Request Forgery attack
Alta
CVE-2024-46983
SOFA Hessian Remote Command Execution (RCE) Vulnerability
Media
CVE-2024-46979
org.xwiki.platform:xwiki-platform-notifications-ui leaks data of notification filters of users
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.