High
CVE-2023-50571
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2023-7148
ShifuML shifu code injection vulnerability
High
CVE-2023-5236
Infinispan circular object references causes out of memory errors
Medium
CVE-2023-5384
Infinispan caches credentials in clear text
Medium
CVE-2023-51074
json-path Out-of-bounds Write vulnerability
High
CVE-2023-51080
hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method
Critical
CVE-2023-51084
hyavijava stack overflow vulnerability
High
CVE-2023-51075
hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function
Medium
CVE-2023-51079
mvel2 TimeOut error exists in the ParseTools.subCompileExpression method
Medium
CVE-2023-27150
OpenCRX Cross-site Scripting vulnerability
Medium
CVE-2023-6911
WSO2 Registry Stored Cross Site Scripting (XSS) vulnerability
High
CVE-2023-6291
The redirect_uri validation logic allows for bypassing explicitly allowed hosts that would otherwise be restricted
Critical
CVE-2023-51656
Apache IoTDB: Unsafe deserialize map in Sync Tool
Medium
CVE-2023-46131
Grails data binding causes JVM crash and/or other denial of service
High
CVE-2023-37544
Apache Pulsar WebSocket Proxy contains an Improper Authentication vulnerability
High
CVE-2023-50732
Velocity execution without script right through tree macro
High
CVE-2023-50730
Grackle has StackOverflowError in GraphQL query processing
Medium
CVE-2023-6134
Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri
Medium
CVE-2023-6886
Xnx3 Wangmarket Cross-Site Scripting vulnerability
Critical
CVE-2023-50723
Remote code execution/programming rights with configuration section from any user account
Critical
CVE-2023-50722
XSS/CSRF Remote Code Execution in XWiki.ConfigurableClass
Critical
CVE-2023-50721
Remote code execution from account through SearchAdmin
Medium
CVE-2023-50720
Solr search discloses email addresses of users
High
CVE-2023-50719
Solr search discloses password hashes of all users
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.