Media
CVE-2024-34696
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Baja
CVE-2024-39458
Exposure of secrets through system log in Jenkins Structs Plugin
Media
CVE-2024-39459
Secret file credentials stored unencrypted in rare cases by Plain Credentials Plugin
Media
CVE-2024-39460
Bitbucket OAuth access token exposed in the build log by Bitbucket Branch Source Plugin
Baja
CVE-2024-38364
DSpace Cross Site Scripting (XSS) via a deposited HTML/XML document
Alta
CVE-2024-38374
Improper Restriction of XML External Entity Reference in org.cyclonedx:cyclonedx-core-java
Crítica
CVE-2024-38369
XWiki programming rights may be inherited by inclusion
Crítica
CVE-2024-29868
Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation
Media
CVE-2024-27136
Cross site scripting in Apache JSPWiki
Baja
CVE-2024-5967
Keycloak leaks configured LDAP bind credentials through the Keycloak admin console
Media
CVE-2021-47621
ClassGraph XML External Entity Reference
Crítica
CVE-2024-37899
XWiki Platform allows remote code execution from user account
Alta
CVE-2024-6162
Undertow's url-encoded request path information can be broken on ajp-listener
Alta
CVE-2024-36543
STRIMZI incorrect access control
Crítica
CVE-2024-37902
DeepJavaLibrary API absolute path traversal
Media
CVE-2024-38460
SonarQube logs sensitive information
Media
CVE-2024-37309
CrateDB has a Client initialized Session-Renegotiation DoS
Media
CVE-2024-37280
Elasticsearch StackOverflow vulnerability
Baja
CVE-2024-1722
Keycloak Denial of Service via account lockout
Baja
CVE-2021-3754
Keycloak's improper input validation allows using email as username
Alta
CVE-2024-36263
Apache Submarine Server Core has a SQL Injection Vulnerability
Crítica
CVE-2024-36265
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core.
Crítica
CVE-2024-36264
** UNSUPPORTED WHEN ASSIGNED ** Improper Authentication vulnerability in Apache Submarine Commons Utils.
Alta
CVE-2024-3656
Keycloak's admin API allows low privilege users to use administrative functions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.