Critical
CVE-2024-1143
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 547
Reset filters
Critical
CVE-2024-23636
Remote Command Execution in SOFARPC
High
CVE-2024-22233
Spring Framework server Web DoS Vulnerability
High
CVE-2024-21651
XWiki vulnerable to Denial of Service attack through attachments
High
CVE-2023-49280
Data leak of password hash through change requests
High
CVE-2022-41678
Apache ActiveMQ Deserialization of Untrusted Data vulnerability
Critical
CVE-2023-46732
XWiki Platform vulnerable to reflected cross-site scripting through revision parameter in content menu
High
CVE-2023-39913
Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability
Medium
CVE-2023-46120
RabbitMQ Java client's Lack of Message Size Limitation leads to Remote DoS Attack
Medium
Exploited in attacks
CVE-2023-44487
HTTP/2 Stream Cancellation Attack
High
ghsa-86q5-qcjc-7pv4
Presto JDBC Server-Side Request Forgery by nextUri
High
ghsa-xm7x-f3w2-4hjm
Presto JDBC Server-Side Request Forgery by redirect
High
CVE-2023-4759
Arbitrary File Overwrite in Eclipse JGit
Medium
CVE-2023-42503
Apache Commons Compress denial of service vulnerability
Medium
CVE-2023-41327
WireMock Controlled Server Side Request Forgery vulnerability through URL
Medium
CVE-2023-41046
Velocity execution without script right through VelocityCode and VelocityWiki property
High
CVE-2023-40572
XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action
High
CVE-2022-46751
Apache Ivy External Entity Reference vulnerability
Critical
CVE-2023-38647
Deserialization vulnerability in Helix workflow and REST
High
CVE-2023-37460
Arbitrary File Creation in AbstractUnArchiver
High
CVE-2023-28754
Apache ShardingSphere-Agent Deserialization of Untrusted Data vulnerability
Medium
CVE-2023-37476
OpenRefine vulnerable to zip slip in project import
Medium
CVE-2023-37943
Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
Critical
CVE-2023-31066
Apache InLong has Files or Directories Accessible to External Parties in Apache InLong
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.