Low
CVE-2023-32263
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2023-32262
Exposure of system-scoped credentials in Jenkins Dimensions Plugin
Medium
CVE-2023-32261
Missing permission check in Jenkins Dimensions Plugin allows enumerating credentials IDs
Critical
CVE-2023-34034
Access Control Bypass in Spring Security
High
CVE-2023-28754
Apache ShardingSphere-Agent Deserialization of Untrusted Data vulnerability
Medium
CVE-2023-0105
Keycloak: Impersonation and lockout possible through incorrect handling of email trust
Medium
CVE-2023-37476
OpenRefine vulnerable to zip slip in project import
High
CVE-2023-34035
Spring Security's authorization rules can be misconfigured when using multiple servlets
Medium
CVE-2023-34036
Spring HATEOAS vulnerable to Improper Neutralization of HTTP Headers for Scripting Syntax
Critical
CVE-2023-26512
rabbitmq-connector plugin module in Apache EventMesh platforms allows attackers to send controlled message
Critical
CVE-2023-37462
org.xwiki.platform:xwiki-platform-skin-ui Eval Injection vulnerability
High
CVE-2023-38286
Spring-boot-admin sandbox bypass via crafted HTML
Medium
CVE-2023-3635
Okio Signed to Unsigned Conversion Error vulnerability
Medium
CVE-2023-37959
Jenkins Sumologic Publisher Plugin missing permission check
High
CVE-2023-37961
Jenkins Assembla Auth Plugin vulnerable to cross-site request forgery
Medium
CVE-2023-37960
Jenkins MathWorks Polyspace Plugin vulnerable to arbitrary file read
High
CVE-2023-37962
Jenkins Benchmark Evaluator Plugin vulnerable to cross-site request forgery
Medium
CVE-2023-37963
Jenkins Benchmark Evaluator Plugin missing permission check
High
CVE-2023-37958
Jenkins Sumologic Publisher Plugin vulnerable to cross-site request forgery
Medium
CVE-2023-37965
Jenkins ElasticBox CI Plugin missing permission check
High
CVE-2023-37964
Jenkins ElasticBox CI Plugin vulnerable to cross-site request forgery
Medium
CVE-2023-37944
Jenkins Datadog Plugin does not perform a permission check in an HTTP endpoint.
Medium
CVE-2023-37954
Jenkins Rebuilder Plugin vulnerable to Cross Site Request Forgery
Medium
CVE-2023-37955
Jenkins Test Results Aggregator Plugin vulnerable to Cross Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.