Low
ghsa-72fp-w44g-625q
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Critical
CVE-2023-46732
XWiki Platform vulnerable to reflected cross-site scripting through revision parameter in content menu
Critical
CVE-2023-46731
XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest
Medium
CVE-2023-4061
wildfly-core Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Critical
CVE-2023-46244
XWiki Platform privilege escalation from script right to programming right through title displayer
High
CVE-2023-46243
XWiki Platform vulnerable to privilege escalation and remote code execution via the edit action
Critical
CVE-2023-46242
XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token
Medium
CVE-2023-5763
Eclipse Glassfish remote code execution issue
High
ghsa-7c2q-5qmr-v76q
DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998
Medium
CVE-2023-31417
Elasticsearch allows insertion of sensitive information into log files when using deprecated URIs
Critical
CVE-2023-45137
XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages
Critical
CVE-2023-45136
XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled
Critical
CVE-2023-45135
XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title
Critical
CVE-2023-45134
XWiki Platform XSS vulnerability from account in the create page form via template provider
Critical
CVE-2023-37913
org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter
High
CVE-2023-37912
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
High
CVE-2023-37910
org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move
Critical
CVE-2023-37908
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
Low
CVE-2023-46658
Jenkins MSTeams Webhook Trigger Plugin uses non-constant time webhook token comparison
Low
CVE-2023-46656
Jenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison
Low
CVE-2023-46660
Non-constant time webhook token hash comparison in Jenkins Zanata Plugin
Low
CVE-2023-46657
Jenkins Gogs Plugin uses non-constant time webhook token comparison
Medium
CVE-2023-31580
light-oauth2 missing public key verification
High
CVE-2023-43795
WPS Server Side Request Forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.