Medium
CVE-2024-25125
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
High
CVE-2024-23833
OpenRefine JDBC Attack Vulnerability
Medium
CVE-2023-50298
Apache Solr's Streaming Expressions allow users to extract data from other Solr Clouds
Medium
CVE-2024-23639
Micronaut management endpoints vulnerable to drive-by localhost attack
High
CVE-2024-24113
XXL-JOB vulnerable to Server-Side Request Forgery
Medium
CVE-2024-24823
Graylog session fixation vulnerability through cookie injection
High
CVE-2024-24824
Graylog vulnerable to instantiation of arbitrary classes triggered by API request
High
CVE-2023-51437
Apache Pulsar SASL Authentication Provider observable timing discrepancy vulnerability
Medium
CVE-2024-23635
Malicious input can provoke XSS when preserving comments
Critical
CVE-2024-1143
Central Dogma Authentication Bypass Vulnerability via Session Leakage
Critical
CVE-2024-22533
Beetl Server-Side Template Injection vulnerability
High
CVE-2023-29055
Apache Kylin has Insufficiently Protected Credentials
High
CVE-2024-23899
Arbitrary file read vulnerability in Git server Plugin can lead to RCE
High
CVE-2024-23905
Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin
Medium
CVE-2023-6927
keycloak-core: open redirect via "form_post.jwt" JARM response mode
High
CVE-2024-22233
Spring Framework server Web DoS Vulnerability
Critical
CVE-2017-20189
Clojure classes can be used to craft a serialized object that runs arbitrary code on deserialization
High
CVE-2023-49299
Apache DolphinScheduler: Arbitrary js execute as root for authenticated users
Critical
CVE-2023-41544
JeecgBoot server-side template injection
High
CVE-2023-3629
Infinispan REST Server's cache retrieval endpoints do not properly evaluate the necessary admin permissions
High
CVE-2023-3628
Infinispan REST Server's bulk read endpoints do not properly evaluate user permissions
Medium
CVE-2023-6835
WSO2 API Manager allows attackers to change the API rating
High
CVE-2023-50767
Jenkins Nexus Platform Plugin missing permission check
Medium
CVE-2023-50768
Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.