High
Exploited in attacks
CVE-2025-58360
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 53
Reset filters
High
CVE-2025-64099
OpenAM: Using arbitrary OIDC requested claims values in id_token and user_info is allowed
Medium
CVE-2025-53864
Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON
High
CVE-2025-30220
[XBOW-025-068] XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service
High
CVE-2025-47889
Jenkins WSO2 Oauth Plugin Fails to Properly Authenticate User Credentials
Medium
CVE-2025-1391
Improper Authorization in Keycloak Organization Mapper Allows Unauthorized Organization Claims
Critical
CVE-2024-47807
Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation
Critical
CVE-2024-47806
Jenkins OpenId Connect Authentication Plugin lacks audience claim validation
High
CVE-2021-22573
google-oauth-java-client improperly verifies cryptographic signature
Critical
CVE-2023-45138
XWiki Change Request Application UI XSS and remote code execution through change request title
Medium
CVE-2023-36820
io.micronaut.security:micronaut-security-oauth2 has invalid IdTokenClaimsValidator logic on aud
High
CVE-2022-4244
plexus-codehaus vulnerable to directory traversal
High
CVE-2023-32007
** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has
Critical
CVE-2023-1784
jeecg-boot vulnerable to improper authentication
Medium
ghsa-9vx8-f5c4-862x
XML External Entity (XXE) vulnerability in apoc.import.graphml
Medium
CVE-2023-23926
XML External Entity (XXE) vulnerability in apoc.import.graphml
Medium
CVE-2023-23612
Issue with whitespace in JWT roles in OpenSearch
High
CVE-2022-23532
org.neo4j.procedure:apoc Path Traversal Vulnerability
Medium
CVE-2022-36022
Use of unclaimed s3 bucket in tests and examples
High
CVE-2022-39248
matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion
Medium
CVE-2022-37423
Neo4j Graph apoc plugins Partial Path Traversal Vulnerability
Medium
CVE-2021-21619
XSS vulnerability in Jenkins Claim Plugin
High
CVE-2020-2166
RCE vulnerability in Jenkins Pipeline: AWS Steps Plugin
High
CVE-2012-1618
Unescaped parameters in the PostgreSQL JDBC driver
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.