High
CVE-2023-48222
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2023-47112
Authenticated users can view job names and groups they do not have authorization to view
Critical
CVE-2023-6038
H2O local file inclusion vulnerability
High
CVE-2023-26031
Apache Hadoop allows local user to gain root privileges
High
CVE-2023-5720
Quarkus does not properly sanitize artifacts created from its use of the Gradle plugin, allowing certain build system information to remain
High
CVE-2023-5245
Zip slip in mleap
High
CVE-2023-48089
xxl-job-admin vulnerable to Remote Code Execution
Medium
CVE-2023-48088
xxl-job-admin vulnerable to Cross Site Scripting
Medium
CVE-2023-48087
xxl-job-admin vulnerable to Insecure Permissions
High
CVE-2023-34062
In Reactor Netty HTTP Server a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack
High
CVE-2023-5072
Java: DoS Vulnerability in JSON-JAVA
Low
ghsa-72fp-w44g-625q
Signing DynamoDB Sets when using the AWS Database Encryption SDK.
Critical
CVE-2023-46732
XWiki Platform vulnerable to reflected cross-site scripting through revision parameter in content menu
Critical
CVE-2023-46731
XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest
High
CVE-2023-39913
Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability
Medium
CVE-2023-4061
wildfly-core Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Critical
CVE-2023-46244
XWiki Platform privilege escalation from script right to programming right through title displayer
High
CVE-2023-46243
XWiki Platform vulnerable to privilege escalation and remote code execution via the edit action
Critical
CVE-2023-46242
XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token
Medium
CVE-2023-4043
Eclipse Parsson Denial of Service vulnerability
Medium
CVE-2023-5763
Eclipse Glassfish remote code execution issue
High
CVE-2023-31579
Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key
Critical
CVE-2023-46502
OpenCRX allows a remote attacker to execute arbitrary code via a crafted request
High
ghsa-7c2q-5qmr-v76q
DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.