Critical
Exploited in attacks
CVE-2023-46604
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2023-31418
Elasticsearch vulnerable to Uncontrolled Resource Consumption
Medium
CVE-2023-31417
Elasticsearch allows insertion of sensitive information into log files when using deprecated URIs
Medium
CVE-2023-31419
Elasticsearch vulnerable to stack overflow in the search API
Critical
CVE-2023-45137
XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages
Critical
CVE-2023-45136
XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled
Critical
CVE-2023-45135
XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title
Critical
CVE-2023-45134
XWiki Platform XSS vulnerability from account in the create page form via template provider
Critical
CVE-2023-37913
org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter
High
CVE-2023-37912
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
Medium
CVE-2023-37911
org.xwiki.platform:xwiki-platform-oldcore may leak data through deleted and re-created documents
High
CVE-2023-37910
org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move
High
CVE-2023-37909
Privilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet
Critical
CVE-2023-37908
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
Low
CVE-2023-46658
Jenkins MSTeams Webhook Trigger Plugin uses non-constant time webhook token comparison
Medium
CVE-2023-46652
Jenkins lambdatest-automation Plugin missing permission check
Low
CVE-2023-46656
Jenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison
High
CVE-2023-46650
Stored XSS vulnerability in Jenkins GitHub Plugin
Medium
CVE-2023-46651
Jenkins Warnings Plugin exposures system-scoped credentials
Medium
CVE-2023-46655
Jenkins CloudBees CD Plugin vulnerable to arbitrary file read
Low
CVE-2023-46653
Jenkins lambdatest-automation Plugin may expose Credentials access token
Low
CVE-2023-46660
Non-constant time webhook token hash comparison in Jenkins Zanata Plugin
Low
CVE-2023-46657
Jenkins Gogs Plugin uses non-constant time webhook token comparison
High
CVE-2023-46654
Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.