Medium
CVE-2024-38808
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Critical
CVE-2024-43202
Apache Dolphinscheduler Code Injection vulnerability
Medium
CVE-2024-38810
Spring Security Missing Authorization vulnerability
Critical
CVE-2024-43401
In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them
Critical
CVE-2024-43400
XWiki Platform allows XSS through XClass name in string properties
High
CVE-2024-44076
Microcks's POST /api/import and POST /api/export endpoints allow non-administrator access
Low
CVE-2024-42850
Silverpeas vulnerable to password complexity rule bypass
High
CVE-2024-42681
Improper Preservation of Permissions in xxl-job
High
CVE-2024-41909
Apache MINA SSHD: integrity check bypass
High
CVE-2024-29831
Apache DolphinScheduler: RCE by arbitrary js execution
High
CVE-2024-30188
Apache DolphinScheduler: Resource File Read And Write Vulnerability
Medium
CVE-2024-42468
CometVisu Backend for openHAB has a path traversal vulnerability
Critical
CVE-2024-42469
CometVisu Backend for openHAB affected by RCE through path traversal
Medium
CVE-2024-42470
CometVisu Backend for openHAB has a sensitive information disclosure vulnerability
High
CVE-2024-42467
CometVisu Backend for openHAB affected by SSRF/XSS
Medium
CVE-2024-43045
Jenkins does not perform a permission check in an HTTP endpoint
High
CVE-2024-43044
Jenkins Remoting library arbitrary file read vulnerability
Critical
CVE-2023-45146
XXL-RPC Deserialization of Untrusted Data vulnerability
Critical
CVE-2023-42809
Redisson vulnerable to Deserialization of Untrusted Data
Medium
CVE-2023-28857
Apereo CAS vulnerable to credential leaks for LDAP authentication
Medium
CVE-2022-23554
Alpine allows Authentication Filter bypass
High
CVE-2022-23553
Alpine allows URL access filter bypass
High
CVE-2024-36116
Path traversal in Reposilite javadoc file expansion (arbitrary file creation/overwrite) (`GHSL-2024-073`)
High
CVE-2024-36115
Reposilite artifacts vulnerable to Stored Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.