Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtrosApache Dolphinscheduler Code Injection vulnerability
Spring Security Missing Authorization vulnerability
In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them
XWiki Platform allows XSS through XClass name in string properties
Microcks's POST /api/import and POST /api/export endpoints allow non-administrator access
Silverpeas vulnerable to password complexity rule bypass
Improper Preservation of Permissions in xxl-job
Apache MINA SSHD: integrity check bypass
Apache DolphinScheduler: RCE by arbitrary js execution
Apache DolphinScheduler: Resource File Read And Write Vulnerability
CometVisu Backend for openHAB has a path traversal vulnerability
CometVisu Backend for openHAB affected by RCE through path traversal
CometVisu Backend for openHAB has a sensitive information disclosure vulnerability
CometVisu Backend for openHAB affected by SSRF/XSS
Jenkins does not perform a permission check in an HTTP endpoint
Jenkins Remoting library arbitrary file read vulnerability
XXL-RPC Deserialization of Untrusted Data vulnerability
Redisson vulnerable to Deserialization of Untrusted Data
Apereo CAS vulnerable to credential leaks for LDAP authentication
Alpine allows Authentication Filter bypass
Alpine allows URL access filter bypass
Path traversal in Reposilite javadoc file expansion (arbitrary file creation/overwrite) (`GHSL-2024-073`)
Reposilite artifacts vulnerable to Stored Cross-site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.