Media
CVE-2024-32007
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Alta
CVE-2024-40642
Absent Input Validation in BinaryHttpParser
Media
CVE-2024-39900
The OpenSearch reporting plugin improperly controls tenancy access to reporting resources
Alta
CVE-2024-29178
Apache StreamPark: FreeMarker SSTI RCE Vulnerability
Media
CVE-2024-29120
Apache StreamPark: Information leakage vulnerability
Crítica
CVE-2023-7272
Eclipse Parsson stack overflow when parsing deeply nested input
Alta
CVE-2024-31411
Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes.
Media
CVE-2024-29737
Apache StreamPark: maven build params could trigger remote command execution
Media
CVE-2023-52291
Apache StreamPark: Unchecked maven build params could trigger remote command execution
Media
CVE-2024-31979
Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements.
Baja
CVE-2024-30471
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.
Alta
CVE-2023-49566
Apache Linkis DataSource's JDBC Datasource Module with DB2 has JNDI Injection vulnerability
Alta
CVE-2023-41916
Apache Linkis DataSource allows arbitrary file reading
Alta
CVE-2023-46801
Apache Linkis DataSource remote code execution vulnerability
Alta
CVE-2024-36522
Apache Wicket: Remote code execution via XSLT injection
Baja
CVE-2024-39901
OpenSearch Observability does not properly restrict access to private tenant resources
Media
CVE-2024-39031
Silverpeas Core Cross-site Scripting vulnerability
Alta
CVE-2024-22271
Spring Cloud Function Framework vulnerable to Denial of Service
Media
CVE-2024-3653
Undertow Missing Release of Memory after Effective Lifetime vulnerability
Alta
CVE-2024-5971
Undertow Denial of Service vulnerability
Media
CVE-2024-37389
Apache NiFi vulnerable to Cross-site Scripting
Alta
CVE-2024-34750
Apache Tomcat - Denial of Service
Crítica
Explotada en ataques
CVE-2024-36401
Remote Code Execution (RCE) vulnerability in geoserver
Alta
CVE-2024-24749
Classpath resource disclosure in GWC Web Resource API on Windows / Tomcat
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.