High
CVE-2024-42467
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2024-43045
Jenkins does not perform a permission check in an HTTP endpoint
High
CVE-2024-43044
Jenkins Remoting library arbitrary file read vulnerability
Critical
CVE-2023-42809
Redisson vulnerable to Deserialization of Untrusted Data
Medium
CVE-2022-23554
Alpine allows Authentication Filter bypass
High
CVE-2024-36116
Path traversal in Reposilite javadoc file expansion (arbitrary file creation/overwrite) (`GHSL-2024-073`)
High
CVE-2024-36115
Reposilite artifacts vulnerable to Stored Cross-site Scripting
Medium
CVE-2024-41948
biscuit-java vulnerable to public key confusion in third party block
Critical
CVE-2024-41947
XWiki Platform vulnerable to Cross-Site Scripting (XSS) through conflict resolution
Critical
CVE-2024-37901
XWiki Platform vulnerable to remote code execution from account via SearchSuggestConfigSheet
Medium
CVE-2024-37898
XWiki Platform vulnerable to document deletion and overwrite from edit
High
CVE-2023-48396
Apache SeaTunnel Web Authentication vulnerability
High
CVE-2024-39676
Apache Pinot: Unauthorized endpoint exposed sensitive information
High
CVE-2024-25638
DNSJava DNSSEC Bypass
Medium
CVE-2024-23321
Apache RocketMQ Vulnerable to Unauthorized Exposure of Sensitive Data
High
CVE-2024-6960
H2O vulnerable to Deserialization of Untrusted Data
High
CVE-2024-40642
Absent Input Validation in BinaryHttpParser
Medium
CVE-2024-39900
The OpenSearch reporting plugin improperly controls tenancy access to reporting resources
Low
CVE-2024-30471
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.
High
CVE-2023-49566
Apache Linkis DataSource's JDBC Datasource Module with DB2 has JNDI Injection vulnerability
High
CVE-2023-41916
Apache Linkis DataSource allows arbitrary file reading
High
CVE-2023-46801
Apache Linkis DataSource remote code execution vulnerability
Low
CVE-2024-39901
OpenSearch Observability does not properly restrict access to private tenant resources
Medium
CVE-2024-39031
Silverpeas Core Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.