Medium
CVE-2023-41943
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2023-41945
Disabled permissions granted by Jenkins Assembla Auth Plugin
Medium
CVE-2023-41947
Missing permission checks in Jenkins Frugal Testing Plugin
Medium
CVE-2023-41944
HTML injection vulnerability in Jenkins AWS CodeCommit Trigger Plugin
Critical
CVE-2023-40743
Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService
Medium
CVE-2023-41046
Velocity execution without script right through VelocityCode and VelocityWiki property
High
CVE-2023-40771
DataEase vulnerable to SQL injection
High
CVE-2023-39685
hson-java vulnerable to denial of service
Medium
CVE-2023-41034
DDFFileParser is vulnerable to XXE Attacks
High
CVE-2023-40787
SpringBlade vulnerable to SQL injection
High
CVE-2023-40828
pf4j vulnerable to remote code execution via expandIfZip method in the extract function
High
CVE-2023-40827
pf4j vulnerable to remote code execution via loadpluginPath parameter
High
CVE-2023-40826
pf4j vulnerable to remote code execution via the zippluginPath parameter
Medium
CVE-2023-41080
Apache Tomcat Open Redirect vulnerability
Medium
CVE-2023-24620
Esoteric YamlBeans XML Entity Expansion vulnerability
High
CVE-2023-24621
Esoteric YamlBeans Unsafe Deserialization vulnerability
High
CVE-2023-34040
Spring-Kafka has Java Deserialization vulnerability When Improperly Configured
Critical
CVE-2023-40573
XWiki Platform's Groovy jobs check the wrong author, allowing remote code execution
High
CVE-2023-40572
XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action
Medium
CVE-2022-44730
Apache Batik information disclosure vulnerability
High
CVE-2022-44729
Apache XML Graphics Batik Server-Side Request Forgery vulnerability
Medium
CVE-2023-4303
Jenkins Fortify Plugin HTML injection vulnerability
Medium
CVE-2023-4301
Jenkins Fortify Plugin cross-site request forgery vulnerability
Medium
CVE-2023-4302
Jenkins Fortify Plugin missing permission check
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.