Critical
CVE-2023-44311
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Critical
CVE-2023-44310
Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu
Critical
CVE-2023-44309
Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components
Critical
CVE-2023-42629
Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page
Critical
CVE-2023-42497
Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page
Critical
CVE-2023-45138
XWiki Change Request Application UI XSS and remote code execution through change request title
High
CVE-2023-43667
SQL Injection in Apache InLong
Critical
CVE-2023-43668
Authorization Bypass in Apache InLong
Medium
CVE-2023-43666
Insufficient Verification of Data Authenticity in Apache InLong
Critical
CVE-2023-44981
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper
High
ghsa-xpw8-rcwv-8f8p
io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack
Medium
CVE-2023-45648
Apache Tomcat Improper Input Validation vulnerability
Medium
Exploited in attacks
CVE-2023-44487
HTTP/2 Stream Cancellation Attack
High
CVE-2023-36478
HTTP/2 HPACK integer overflow and buffer allocation
Medium
CVE-2023-42795
Apache Tomcat Incomplete Cleanup vulnerability
Medium
CVE-2023-42794
Apache Tomcat Incomplete Cleanup vulnerability
Medium
CVE-2023-36566
Microsoft Common Data Model SDK Denial of Service Vulnerability
Medium
CVE-2023-25822
Denial of service vulnerability on creating a Launch with too many recursively nested elements in reportportal
Medium
CVE-2023-43643
mXSS in AntiSamy
High
CVE-2023-45303
ThingsBoard Server-Side Template Injection
Medium
CVE-2023-36820
io.micronaut.security:micronaut-security-oauth2 has invalid IdTokenClaimsValidator logic on aud
High
CVE-2023-1584
Quarkus OIDC can leak both ID and access tokens
High
ghsa-86q5-qcjc-7pv4
Presto JDBC Server-Side Request Forgery by nextUri
High
ghsa-xm7x-f3w2-4hjm
Presto JDBC Server-Side Request Forgery by redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.