High
CVE-2023-39410
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2023-3223
Undertow vulnerable to denial of service
Medium
CVE-2022-4245
codehaus-plexus vulnerable to XML injection
High
CVE-2022-4244
plexus-codehaus vulnerable to directory traversal
High
CVE-2023-43642
snappy-java's missing upper bound check on chunk length can lead to Denial of Service (DoS) impact
Critical
CVE-2023-40989
SQL injection in jeecgboot
High
CVE-2023-43496
Jenkins temporary plugin file created with insecure permissions
Medium
CVE-2023-43494
Jenkins does not exclude sensitive build variables from search
Low
CVE-2023-43498
Jenkins temporary uploaded file created with insecure permissions
Medium
CVE-2023-43502
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Medium
CVE-2023-43500
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Low
CVE-2023-43497
Jenkins temporary uploaded file created with insecure permissions
Medium
CVE-2023-43501
Jenkins Build Failure Analyzer Plugin missing permission check
High
CVE-2023-43495
Jenkins Cross-site Scripting vulnerability
High
CVE-2023-43499
Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability
Low
CVE-2023-34047
Spring for GraphQL may be exposed to GraphQL context with values from a different session
High
CVE-2023-4853
Quarkus HTTP vulnerable to incorrect evaluation of permissions
Critical
Exploited in attacks
CVE-2022-24816
Improper Control of Generation of Code ('Code Injection') in jai-ext
High
CVE-2023-4759
Arbitrary File Overwrite in Eclipse JGit
Low
CVE-2023-41900
Jetty's OpenId Revoked authentication allows one request
Medium
CVE-2023-40167
Jetty accepts "+" prefixed value in Content-Length
Low
CVE-2023-36479
Jetty vulnerable to errant command quoting in CGI Servlet
High
CVE-2023-1108
Undertow denial of service vulnerability
Medium
CVE-2023-42503
Apache Commons Compress denial of service vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.