Medium
CVE-2023-46651
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
Medium
CVE-2023-46655
Jenkins CloudBees CD Plugin vulnerable to arbitrary file read
High
CVE-2023-43795
WPS Server Side Request Forgery vulnerability
Medium
CVE-2023-41339
Unsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRF
Medium
CVE-2023-25753
Apache Shenyu Server Side Request Forgery vulnerability
Critical
CVE-2023-44981
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper
High
ghsa-xpw8-rcwv-8f8p
io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack
Medium
Exploited in attacks
CVE-2023-44487
HTTP/2 Stream Cancellation Attack
High
CVE-2023-36478
HTTP/2 HPACK integer overflow and buffer allocation
Medium
CVE-2023-43643
mXSS in AntiSamy
High
CVE-2023-45303
ThingsBoard Server-Side Template Injection
High
ghsa-86q5-qcjc-7pv4
Presto JDBC Server-Side Request Forgery by nextUri
High
ghsa-xm7x-f3w2-4hjm
Presto JDBC Server-Side Request Forgery by redirect
High
CVE-2023-3223
Undertow vulnerable to denial of service
Critical
Exploited in attacks
CVE-2022-24816
Improper Control of Generation of Code ('Code Injection') in jai-ext
Medium
CVE-2023-40167
Jetty accepts "+" prefixed value in Content-Length
Low
CVE-2023-36479
Jetty vulnerable to errant command quoting in CGI Servlet
Critical
CVE-2023-41887
OpenRefine Remote Code execution in project import with mysql jdbc url attack
High
CVE-2023-41886
OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack
Medium
CVE-2022-1415
Drools Core Deserialization of Untrusted Data vulnerability
Medium
CVE-2023-41327
WireMock Controlled Server Side Request Forgery vulnerability through URL
Medium
CVE-2022-44730
Apache Batik information disclosure vulnerability
High
CVE-2022-44729
Apache XML Graphics Batik Server-Side Request Forgery vulnerability
High
CVE-2023-40313
OpenNMS vulnerable to remote code execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.